Lo JimTheDog

thx once again,  your a star!

how are you fixed for building an ecommerce site, lol.

STARDUST

hiya jimthedog,
no probs on the delay, only looked tonite to see if i had a reply, many thx for the code, i'll have a crack at it over the weekend and let you know how it goes. i guess the script im using to encript the user details can be inserted in the the php code?

to be honest im new to all this and i'm only using this java script do to a website tell me it was one of the best they had seen and it was very easy to get up and running, i have an editional piece of code, where i type in the users name and password and it encripts it for me and give me a piece of code the i add to the page, ie
<option value='Tappet|57456|NNPIETZB'>Tappet </option>

i would prefer a SQL powered way of doing this but like i say, i'm still new to all this and that seemed abit to advanced for now, do you know of any good site where i could grab this code and tables for a sql vision?

many thx for your time your've been a big help.

this is my form and script code where i'm having the prob, your code uses username and password, where im using memlist and password


<form action="../../../Members Login/membersarea.php" name=login>
<tr>
                    <td colspan=2 align=center><span class="style3"><b>MEMBERS LOGIN</b></span></td>
                  </tr>
                  <tr>
                    <td width="60"><span class="style31">username:</span></td>
                    <td width="125"><select name=memlist>
                        <option value='x'> </option>
                        <option value='paul|39325|NEPBNYXB'>paul </option>
                        <option value='Scottie2Hottie|44419|NMOFLXBJ'> Scottie2Hottie </option>
                        <option value='Tappet|57456|NNPIETZB'>Tappet </option>
                    </select></td>
                  </tr>
                  <tr>
                    <td><span class="style31">password:</span></td>
                    <td><input type=password size=10 maxlength=8 name=pass />
                        <input type=button value="Login" onclick="check(this.form)" /></td>
                  </tr>
                </table>
              </form>
              <script language="JavaScript">
<!-- Begin
var params=new Array(4);
var alpha="ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHI";
function check(form) {
which=form.memlist.selectedIndex;
choice = form.memlist.options[which].value+"|";
if (choice=="x|") {
alert("Please Select Your Name From The List");
return;
}
p=0;
for (i=0;i<3;i++) {
a=choice.indexOf("|",p);
params=choice.substring(a,p);
p=a+1;
}
h1=makehash(form.pass.value,3);
h2=makehash(form.pass.value,10)+" ";
if (h1!=params[1]) {
alert("Incorrect Password!"); return; };
var page="";
for (var i=0;i<8;i++) {
letter=params[2].substring(i,i+1)
ul=letter.toUpperCase();
a=alpha.indexOf(ul,0);
a-=(h2.substring(i,i+1)*1);
if (a<0) a+=26;
page+=alpha.substring(a,a+1); };
top.location=page.toLowerCase()+".html";
}
function makehash(pw,mult) {
pass=pw.toUpperCase();
hash=0;
for (i=0;i<8;i++) {
letter=pass.substring(i,i+1);
c=alpha.indexOf(letter,0)+1;
hash=hash*mult+c;
}
return(hash);
}

lo jimthedog, ive tried the code that you posted but i can't get it to work, if i post my username password script is there any chance you can intergrate it for me please?

Hi Tappet,

I'm not sure how you do your athentication but this should point you in the right direction.

PART ONE

<!--put this php snippet at the top of your index page (which should also have a .php extension -->
<?php

// first we check to make sure there are no sessions - if there are, destroy them
if (session_id() != "") {session_destroy();
unset($_SESSION );}
?>

<!--  this will look something like your submit form -->
<form action="testpage2.php" method="post">
  <p>
    UserName:
    <input name="UserName" type="text" id="UserName">
  </p>
  <p>
    Password:
    <input name="password" type="text" id="password">
    <input type="submit" name="Submit" value="Submit">
  </p>
</form>


PART TWO

<!--add everything below this comment as the first thing in each page you need to authenticate. All pages should have a .php extension. -->
<!--place this code at the top of all subsequent pages you need athentication on -->

<?php
//start a session
session_start();

// if the password and username (via your own athentication methods) are correct then do this
$pwd = $_POST['password'];
$username = $_POST['UserName'];

// check the validation value
if ($username == "user" && $pwd == "password"){
$_SESSION['auth']="yes"; }

//if it doesn't check out then boot the user back to the index (in this case testpage1.php)
if ($_SESSION['auth'] != "yes") {header ("location: testpage1.php");exit();}
?>

<!-- now carry on with the rest of your page -->
<html>
<head></head>
<body>Page OK</body>
</html>


I hope this helps.

JTD

Hi Tappet,

Do you want a single username/password or do you want each user to have their own combination. I'll warn you now, the second option will get technical.

JTD