1. ChECK TO SEE IF THE SESSION ORG ID EXISTS2. CHECK TO SEE IF THE SESSION
MEM ID EXISTS
3. CAN CURRENT MEM ID CREATE MEM, EDIT MEM, DELETE MEM, SET PERMISSIONS FOR
MEM - INCLUDE IN LOGIN SCREEN
- ASSIGN THE RESULTS TO SESSION VARIABLES
IF ERROR REPORT IT BELOW WITH LINK TO LOGIN SCREEN AND PERSON TO CONTACT FOR
MORE DETAILS
// CHECK SESSION ID AGAINST CURRENT SESSION ID RECORDED AT LOGIN
// IF SESSION ID IS DIFFERENT, THEN RETURN TO LOGIN
Your User Name or Password was incorrect';
//no fields filled in
$empty_err = '
You need to login with your User Name and Password
';
//something entered that wasn't a letter or number error message
$chr_err = 'Please retry
';
// DO NOT EDIT BELOW HERE
//if the form is empty and the cookie isn't set
//then display error message the return to login
if($username == "" && $password == "" && !isset($_COOKIE["this_cookie"])){
print($empty_err);
include($login_page);
exit();
}
//if the form is not empty and the cookie isn't set
//then make sure that only letters and numbers are entered
//if there are then display error message the return to login
if($username != "" || $password != "" && !isset($_COOKIE["this_cookie"])){
if (preg_match ("/[^a-zA-Z0-9]/", $username.$password)){
print($chr_err);
include($login_page);
exit();
}
}
//if the cookie isn't set
if (!isset($_COOKIE["this_cookie"]) ){
$user_count = count($uname);
$user_exists = false;
// check through all the users to see if they exist
for ($i = 1; $i <= $user_count; $i++) {
if ($uname[$i] == $username && $upass[$i] == $password){
$user_id=$i;
//$welcome_name = $known_as[$i];
$user_exists = true;
}
}
if(!$user_exists){
print ($login_err);
include($login_page);
exit();
}
//if the login is correct then set the cookie
$cookie_val=crypt($uname[$user_id]);
//set the cookie so it dies when the browser is closed
setcookie ("name", $known_as[$user_id], 0);
setcookie ("this_cookie", $cookie_val, 0);
header("Location: $success_page");
exit();
}
//if a user tries to access validate.php directly and they are logged in
if($REQUEST_URI == $validate_path){
echo "\n\n";
echo "Yor are logged in\n";
echo "\n";
echo "\n";
echo "You are logged in. Continue\n";
echo "\n";
echo "\n";
}
?>