我正在尝试这样做,以便当未登录的用户浏览我的网站并点击链接时,他们将被带到登录页面(在jQuery灯箱窗口中打开),登录后他们是回到他们所在的上一页/原始页面。
我尝试使用这个简单的代码来尝试实现这一点,但是当我使用它时,它不会显示登录页面并直接转到上一页/原始页面,因此用户无法登录。
if(!empty($_SERVER['HTTP_REFERER']))
{
header('Location: '.$_SERVER['HTTP_REFERER']);
}
以下是我的所有登录脚本代码:
HTML:
<form action="login.php" method="post" target="_top" >
<div class="row email">
<input type="email" id="email" name="email" placeholder="Email" value="<?php echo htmlentities($email); ?>" />
</div>
<div class="row password">
<input type="password" id="password" name="password" placeholder="Password" value="<?php echo htmlentities($email); ?>" />
</div>
<input type="submit" name="submit" class="submit-login" value="Login >
</form>
PHP:
<?php
if (logged_in())
{
redirect_to("dashboard.php");
}
include_once("includes/form_functions.php");
// START FORM PROCESSING
if (isset($_POST['submit'])) { // Form has been submitted.
$errors = array();
// perform validations on the form data
$required_fields = array('email', 'password');
$errors = array_merge($errors, check_required_fields($required_fields, $_POST));
$fields_with_lengths = array('email' => 30, 'password' => 30);
$errors = array_merge($errors, check_max_field_lengths($fields_with_lengths, $_POST));
$email = trim(mysql_prep($_POST['email']));
$password = trim(mysql_prep($_POST['password']));
$hashed_password = md5($password);
if ( empty($errors) ) {
// Check database to see if email and the hashed password exist there.
$query = "SELECT id, email, close_account ";
$query .= "FROM ptb_users ";
$query .= "WHERE email = '{$email}' ";
$query .= "AND password = '{$hashed_password}' ";
$query .= "AND close_account = '0' ";
$query .= "LIMIT 1";
$result_set = mysql_query($query);
confirm_query($result_set);
if (mysql_num_rows($result_set) == 1) {
// email/password authenticated
// and only 1 match
$found_user = mysql_fetch_array($result_set);
$_SESSION['user_id'] = $found_user['id'];
$_SESSION['email'] = $found_user['email'];
$_SESSION['sub_expires'] = $found_user['subscription_expires'];
$result = mysql_query("UPDATE ptb_users SET user_online='Online' WHERE id=".$_SESSION['user_id']."")
or die(mysql_error());
redirect_to("dashboard.php");
} else {
// email/password combo was not found in the database
$message = "<div class=\"infobox\"><strong>Email/Password combination incorrect.</strong><br />"
.= "Please make sure your caps lock key is off and try again.</div><br/>";
}
} else {
if (count($errors) == 1) {
$message = "<div class=\"infobox\">There was 1 error in the form.<div>";
} else {
$message = "<div class=\"infobox\">There were " . count($errors) . " errors in the form.<div>";
}
}
} else { // Form has not been submitted.
if (isset($_GET['logout']) && $_GET['logout'] == 1) {
$message = "<div class=\"infobox\">You are now logged out.</div>";
}
$email = "";
$password = "";
}
?>
<?php if (!empty($message)) {echo "<p class=\"message\">" . $message . "</p>";} ?>
<?php if (!empty($errors)) { display_errors($errors); } ?>
答案 0 :(得分:2)
当有人试图访问需要身份验证的网页时,请将该网址存储在$ _SESSION变量中。然后将它们重定向到登录页面。登录后检查是否存在$ _SESSION变量。如果是,请将它们重定向回该URL。
答案 1 :(得分:1)
您可以在AJAX的帮助下登录,并在成功登录后重新加载页面。这在许多方面会更有帮助。
e.g。如果用户名/密码错误,则可能会在查询lighbox窗口中看到错误,而不是等待页面加载显示错误。