BetterPHP

I think you're right Jacek. That fixed the prob. Thanks mate.

Regarding session_start(); - I have it in the init.inc.php file, and I'm including the init.inc.php file on any pages that need to be checked for logins etc. I notice that I also have to have session_start(); on the pages that include init.inc.php, otherwise the session vars don't carry. I thought t...

Nice - thank you mate.

I'm looking for a good tut on preventing session hijacking and fixation.

Yep - that makes perfect sense.

It's only some of the site (registered user specific) that I want users to be logged in to access, so I'll do the check on each protected page.

Do you have any tuts on adding extra session security, or can you recommend a good one?

Cheers mate.

That makes sense Temor. So that check goes on each protected page.

Thanks mate.

Gidday I'm working with your user system code, and I'm wondering what's the best practice way to check if the user is logged in on any extra pages you add? Say you have a 'photos' page that's belongs to the user and the user must be logged in to see, how do you know that the user is logged in if the...

Never mind!!!! I'd added queries to select a code from a pool of allowed codes when the user is activated, create a folder named after this code, do some other stuff, and then insert the code into the user's table once everything has been successfully completed. The problem was that I'd set the user...

I have the user_id column in the users' table set to auto increment. But it shouldn't be auto increment in the activations table, because we're inserting the user_id along with the aid, right? It's very bizarre - it definitely won't let me add a new user to the users' table until any pending activat...

Hi guys I'm stumped figuring out this problem. If I enter registration details for a user, hit submit, and get the activation email, the system won't let me enter another registration until that first one is activated. If I try to register someone else, no user data gets added to the table, although...

Ahh - thanks Jacek. I've set it up to test for the number of rows now.

Thanks again for the tuts - I knew nothing about accessing and interacting with mysql before, but now am able to make something useful.

Much appreciated

Shaun

Hi guys Regarding the registration/email activation tut... Say the user activates, and then they hit the activation link in their email again. Why does mysql NOT throw a warning after the mysql_query("DELETE FROM `user_activations` WHERE `activation_code` = '{$aid}'"); query? ie - the acti...

Hi I've been customising the email registration php, and have come a ways with it. I've added a few more processes to the activation, including setting up a user directory. And it seems to be working. Now I'd like to return to activate.php a true value for when the dir set up (which is the last proc...

That fixed it up - thanks Sal!!!

Hi I have the login/registration tut up and running now, complete with your email activation. THANKS!!! As well as checking if the username already exists, I'd like to check if the email exists in the database too, but can't find where I'm going wrong. In user.inc.php, I added the following function...

Cheers Temor - I should have looked harder before posting - thanks for your time mate.

Hi I've almost got the Register and Login tut working. When registering, if I enter a username but no pass, when the page comes back, the username reappears in the form field, but it has a space entered before it. Here's the code: <input type="text" name="username" id="usern...

Never mind. SELECT_COUNT should be SELECT COUNT without the underscore.

7 hours for a f^%@!$#^%@ underscore!!!!!!!!!!!!!!!!!!!!!!!!!

Onwards and upwards...

Hi I too am having the same problem. Records are being entered into the database, but I get the error: Warning: mysql_result() expects parameter 1 to be resource, boolean given in /home/########/public_html/core/inc/user.inc.php on line 7 Warning: Cannot modify header information - headers already s...