php - My Website Keeps Logging Me Out When Clicking Link To Another Page -


i having issue website sessions. built website requires user log in view webpage. works perfect under domain, when uploaded files different server temporality let client preview web page on server issue stated in title. automatically says password incorrect. can still log in fine if try navigate page within site logs out 99% of time.

i using phpsecurepages login forms @ beginning of each of web pages have

 <?php       // connect secure login       $cfgprogdir = 'phpsecurepages/';       include($cfgprogdir . "secure.php");  

this secure.php looks like

// create constant can checked inside files included. // gives indication if secure.php has been loaded correctly. define('loaded_properly', true);  // check if secure.php has been loaded correctly if (isset($_get['cfgprogdir']) || isset($_post['cfgprogdir']) || isset($_get['languagefile']) || isset($_post['languagefile'])) {         echo "parsing of phpsecurepages has been halted!";         exit();         }  // include configuration require($cfgprogdir . 'config.php');  // https support if (getenv('https') == 'on') {         $cfgurl = 'https://';         } else {         $cfgurl = 'http://';         }  // getting other variables      $phpsp_message = false;  // include functions , variables if ( !defined("functions_loaded") ) {         // check if functions loaded         include($cfgprogdir . 'objects/functions.php');         } include($cfgprogdir . 'lng/' . $languagefile);   // choose between login or logout if (isset($logout) && !(isset($_get['logout']) || isset($_post['logout']))) {         // logout         include($cfgprogdir . 'objects/logout.php');         } else {         // starting login check         if ($nodetailedmessages == true) {                 $strusernotexist = $strusernotallowed = $strpwnotfound = $strpwfalse = $strnopassword = $strnoaccess;                 }          // make post variables global         if (isset($_post['entered_login'])) $entered_login = $_post['entered_login'];         if (isset($_post['entered_password'])) $entered_password = $_post['entered_password'];          // check if login necessary         include($cfgprogdir . "objects/checklogin.php");          // check if ip allowed (if using ip-restriced access)         if ($use_ip_restricted_access==true) {                 include($cfgprogdir . "objects/checklogin_ip.php");                 }          // check login database         if ($usedatabase == true) {                 include($cfgprogdir . 'objects/checklogin_db.php');                 }          // check login data         elseif ($usedata == true) {                 include($cfgprogdir . 'objects/checklogin_data.php');                 } 

it checks php file (checklogin.php)

// check if login necessary  // check if secure.php has been loaded correctly if ( !defined("loaded_properly") || isset($_get['cfgprogdir']) || isset($_post['cfgprogdir'])) {         echo "parsing of phpsecurepages has been halted!";         exit(); }  if (!isset($entered_login) && !isset($entered_password)) {         // use data session         session_start();         // session hack make sessions on old php4 versions work         if (phpversion() > 4.0) {                 if (isset($_session['login'])) $login = $_session['login'];                 if (isset($_session['password'])) $password = $_session['password'];                 }         } else {         // use entered data         session_start();         // session hack make sessions on old php4 versions work         if (phpversion() <= 4.0) {                 session_unregister("login");                 session_unregister("password");                 }         // encrypt entered login & password         $login = $entered_login;         if ($passwordencryptedwithmd5 && function_exists(md5)) {                 $password = md5($entered_password);                 }         else {                 $password = $entered_password;                 }         // session hack make sessions on old php4 versions work         if (phpversion() > 4.0) {                 $_session['login'] = $login;                 $_session['password'] = $password;                 }         else {                 session_register("login");                 session_register("password");                 }         }  if (!isset($login)) {         // no login available         include($cfgprogdir . "interface.php");         exit;         }  if (!isset($password)) {         // no password available         $phpsp_message = $strnopassword;         include($cfgprogdir . "interface.php");         exit;         }  // login , password variables exist // continue checking them ?> 


Comments

Popular posts from this blog

toolbar - How to add link to user registration inside toobar in admin joomla 3 custom component -

linux - disk space limitation when creating war file -