在所有管理页面中包含带登录检查的标题

时间:2013-12-23 16:48:35

标签: php mysql login header include

我需要为网站的管理部分创建一个登录页面,我还需要制作一个包含在所有页面中的标题,以便检查会话。 现在我有三个页面:登录页面,标题和登录中的索引页面成功。 如果我将标题页包含在索引页面中,则无法登录。 这是我的代码: admin_login:

 <!DOCTYPE html>
<html>
<head>
    <title>Login</title>
</head>
<body>
<?php

    $login_form = <<<EOD
<form name="login" id="login" method="POST" action="admin_header.php">
<p><label for="username">Please Enter Username: </label><input type="text" size="100" name="username" id="username" value="" /></p>
<p><label for="password">Please Enter Password: </label><input type="password" size="40" name="password" id="password" value="" /></p>
<p><input type="submit" name="submit" id="submit" value="Submit"/> <input type="reset" name="reset" id="reset" value="reset"/></p>
</form>
EOD;
if (isset($_GET['msg']))
{
$msg=$_GET['msg'];
if($msg!='') 
{
echo '<p>'.$msg.'</p>';
}
}
 //If message is set echo it}

echo "<h1>Please enter your Login Information</h1>";
echo $login_form;
?>
</body>
</html>

admin_header:

<html>
    <head>
        <title>Project</title>
<link type="text/css" rel="stylesheet" href="styles.css"/>
    </head>
    <body>
    <body id="home">
<div class="top" id="header">
<ul>

        <li><a class="menu" href="index.php">Home</a></li>
        <li><a class="menu" href="search.php">Add an Artist</a></li>
        <li><a class="menu" href="contact.php">List the Artists</a></li>
        <li><a class="menu" href="contact.php">Add a movie</a></li>
        <li><a class="menu" href="contact.php">List the movies</a></li>
        <li><a class="menu" href="contact.php">Add an admin</a></li>
</ul>


</div>
<?php
session_start();
define('ADMIN',$_SESSION['username']);
if(!$_SESSION['username'])
{
header("location:admin_login.php");
}
ob_start();
 $server = 'localhost';
 $user = 'root';
 $pass = 'blablabla';
 $mydb = 'projectdb';
 $movies = 'movies';
 $artists='artists';
 $roll='roll';
 $users='Users';
 $connect = mysqli_connect($server, $user, $pass);
 mysqli_select_db($connect,$mydb)or die("cannot select DB");
       $username = $_POST['username']; 
       $password = $_POST['password'];
       if (!isset($username)||($password))
       {
       echo "Please, enter your login information";
       }
 if (!$connect)
       {
       echo ("Cannot connect to $server using $user");
       }
       $username = $_POST['username']; 
       $password = $_POST['password'];
       $username = stripslashes($username);
       $password = stripslashes($password);
       $username = mysqli_real_escape_string($connect,$username);
       $password = mysqli_real_escape_string($connect,$password);
       $sql="SELECT * FROM $users WHERE username='".$username."' and password='".$password."'";
       $result=mysqli_query($connect,$sql);
       $count=mysqli_num_rows($result);
       if($count==1)
       {
       session_start();
       $_SESSION["username"]=$username;
       $_SESSION["password"]=$username; 
       header("location:admin_index.php");

       }
       else 
       { 
        $msg = "Wrong Username or Password. Please retry";
        header("location:admin_login.php?msg=$msg");
       }
ob_end_flush();
?></body></html>

admin_index:

<html>
<body>
<?php
session_start();
define('ADMIN',$_SESSION['username']);
if(!$_SESSION['username'])
{
header("location:admin_login.php");
}
include('admin_header.php');
?>

<html>
<body>
Login Successful
</body>
</html>

如果我没有在索引页面中包含标题,一切正常。我应该从标题中创建两个单独的文件,还是可以保持原样?我非常感谢你的帮助! :)

0 个答案:

没有答案