Login forms PHP

[iMatt]

Hi,

Just a general question on PHP login forms:

I have a html login form(Form.html), which then sends the successful user to the next page (loginsuccess.php).

How can I prevent access to the loginsuccess.php page when typed in the address bar, like so- 'loginsuccess.php'? obviously by doing this its defeating the purposes of a login system.

Any help would be appreciated.

Thanks

[SambaNeko]

Logic of a login processing page should go something like (pseudo code):

if( login credential [such as a cookie] exists ){
  continue to show page or other logged-in operation
}else{
  if( form-submitted login values exist ){
    if( login values are correct ){
      give the user a login cookie; continue to show page or other logged-in operation
    }else{
      send the user to the login page (display "wrong username/pass" message)
    }
  }else{
    send the user to the login page
  }
}

[iMatt]

Brilliant, thanks.

Currently, I am using WAMP server to test my scripts.

I guess I need an actual web server to use cookies? or is WAMP sufficient?



Cheers

[SambaNeko]

WAMP should be sufficient.