php session help

Question

weblover 0 Junior Poster

15 Years Ago

hi all...how are u? i have a question , i'm creatingn a php login system for a forum but i'm new in php and i'm not able to put session timing for the login ..i want when the user login to register the session and then after login in ..if the user is not active for 5 minutes i want him to be redirected to the login page again...i was reading a topic for php session ..but i did not get it ..please help ....that's my code:

<?php

    session_start();


   ?>
<html>

<head>
  <title></title>
</head>

<body>

<?php

$dbh=@mysql_connect('localhost','root','');
if(!$dbh){
exit('Unable to connect');
}

if(!@mysql_select_db('ijdb')){
exit('Unable to find ijdb');
}
$result=@mysql_query('select * from users');
if(!$result){
exit('no data found');
}
$t=0;
$u=$_REQUEST['un'];
$p=$_REQUEST['pass'];
$encpass=md5($p);
while($row=mysql_fetch_array($result)){
	if(($row['name']== $u) and ($row['pass']==$encpass)){
		$t=1;
	}
}


if($t==1){

$_SESSION['user']=$u;
$_SESSION['pass']=$p;



	header("Location: http://www.forum.com/welcome.php");




}
if($t==0){
	echo FAUX;
}


?>
</body>
</html>

php

3 Contributors
15 Replies
97 Views
1 Day Discussion Span
Latest Post 15 Years Ago Latest Post by Designer_101

All 15 Replies

Will Gresham 81 Master Poster

15 Years Ago

You could use a meta redirect to redirect the page after a period.

This would go to a page which unsets the session

<meta http-equiv="Refresh" content="300; url=http://www.site.com/logout_page.php" />

^That goes in the head of the document.

Reply to this topic

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.

Designer_101 -2 Posting Whiz · Answer 1 · 2009-04-08T01:50:58+00:00

Does this code actually work. Surely the headers create an error?

weblover 0 Junior Poster · Answer 2 · 2009-04-08T04:13:22+00:00

yes ..this code works of course ...but i only want the session to be expired..but i don't know how to fix a time for the session ..please help me to do it with this code ..and thnx in advance

Designer_101 -2 Posting Whiz · Answer 3 · 2009-04-08T17:09:21+00:00

<?php
session_start();
if (isset ($_SESSION('loggedin')) {
setcookie(timelogout(), $_COOKIE[timelogout()], time()+600, '/');
}

Also add the following just before your header code.

$_SESSION('loggedin') = true;

This code basically registers a session when the user logs in. And then for each page they visit it checks if the session is set and if it is it sets a cookie that expires in 10mins. If the user goes to a different page obviously the cookie is reset and the time will be 10mins :)

The only downfall is if they have cookies turned of, in which case the cookie wont be set and therefore they will stay logged in nevertheless. However this is very unlikely.

Does this help?

weblover 0 Junior Poster · Answer 4 · 2009-04-08T20:05:35+00:00

thnx alot for your communication ...but this code does not work and i don't know why ..first of all there is a missing ")" and then the timelogout() function ...my editor said it's undefined ,i don't know why ..please if u can implement the session time out in my code in a way that works...and thnx very much in advance.

Designer_101 -2 Posting Whiz · Answer 5 · 2009-04-08T20:56:13+00:00

Wow I do appologise for my rubbish code.
The following will work:
Insert this at the top of everypage:

<?php
session_start();
if (isset ($_SESSION('loggedin')) {
setcookie("timelogout","TimeLogout", time()+600);
}

And insert this just after your header tag:

$_SESSION('loggedin') = true;

Does this help. Sorry about my mistake lol :D

weblover 0 Junior Poster · Answer 6 · 2009-04-09T05:10:08+00:00

weblover 0 Junior Poster

15 Years Ago

still not working .......don't know why:S:S ....

weblover 0 Junior Poster · Answer 7 · 2009-04-09T05:12:48+00:00

weblover 0 Junior Poster

15 Years Ago

and also it has more mistakes ......:S

Designer_101 -2 Posting Whiz · Answer 8 · 2009-04-09T05:22:35+00:00

Yes, I can see where the error would be but its not in the code its more as in the system its working in. The code should bring no errors.

To be honest, I think we were looking into it too deep. Give the above message a go, its alot easier than what I was about to suggest.

Sorry for my lack of dreamweaver lol. I'm hopless without an editor (the colours) :D

weblover 0 Junior Poster · Answer 9 · 2009-04-09T05:34:13+00:00

please help me by implementing the right code into my script ..and thnx

weblover 0 Junior Poster · Answer 10 · 2009-04-09T05:38:01+00:00

thnx alot xan i'll try ur code ...and i hope it will work

Designer_101 -2 Posting Whiz · Answer 11 · 2009-04-09T05:39:35+00:00

Hi
This is what your code should look like:

<?php

    session_start();


   ?>
<html>

<head>
<meta http-equiv="Refresh" content="300; url=http://www.site.com/logout_page.php" />
  <title></title>
</head>

<body>

<?php

$dbh=@mysql_connect('localhost','root','');
if(!$dbh){
exit('Unable to connect');
}

if(!@mysql_select_db('ijdb')){
exit('Unable to find ijdb');
}
$result=@mysql_query('select * from users');
if(!$result){
exit('no data found');
}
$t=0;
$u=$_REQUEST['un'];
$p=$_REQUEST['pass'];
$encpass=md5($p);
while($row=mysql_fetch_array($result)){
	if(($row['name']== $u) and ($row['pass']==$encpass)){
		$t=1;
	}
}


if($t==1){

$_SESSION['user']=$u;
$_SESSION['pass']=$p;



	header("Location: http://www.forum.com/welcome.php");




}
if($t==0){
	echo FAUX;
}


?>
</body>
</html>

Like explained, it will redirect your user to a logout page after the 10mins are up. This happens on everypage making the effect that is there is no activity in this amount of time the user isnt aloud access.

weblover 0 Junior Poster · Answer 12 · 2009-04-09T05:42:24+00:00

yes ...it worked xan ......thnx very much ......but is this a good way to make the user to relogin ......or there is another more nice way ? ...but BTW thnx alot ...

weblover 0 Junior Poster · Answer 13 · 2009-04-09T05:44:50+00:00

it worked ......and thx designer_101 for your help .

Designer_101 -2 Posting Whiz · Answer 14 · 2009-04-09T05:48:12+00:00

No, after thinking about it this is the simplest way of going around it.
The only problem would be if the user has meta redirects disabled.

Another way would be with cookies/sessions that I was trying to create earlier. I'l have my laptop back tomorow and get that script working anyway so keep an eye on this thread.

To continue, there are downsides to that aswell, they might have cookies turned off.

God, users have too much control over what they can and cant have on lol :D

Hoe this helps

php session help

Recommended Answers Collapse Answers

All 15 Replies

Recommended Answers