PHP - Redirect Loop For Member System

Hi, I have a url redirect set up on my site, when I use this I am unable to login, if I use the original Domain name it works fine, thanks for your help.

Is there a way to get current logged in username and based on that redirect to a different page?

I’m using the following secure PHP login without MySql as a login system: https://sourceforge.net/projects/phploginbyvallastech/

Now I’m looking to redirect each logged in user to their personalized page.

But I can’t figure out how to A) fetch the current logged in user and B) redirect multiple users.

This code redirects to the latter address, but the username based redirect is not working:

<?php

session_start();

if ($_SESSION["username"]==User1){

header("location: user1content.php");

exit;

} else {

header("location: generalcontent.php");

exit;

}

{ ?>

<?php } ?>

So it’s clearly not fetching the logged in user. Though <?php echo $login->username; ?> fetches the username just fine.
I know there’s something missing, but what that might be… Have been trying different things without success.

I've built a database based rating system, and till now everything works as expected except of one minor thing that breaks the while rating system.

When you press thumbs up or down it's only adding the vote to the LAST printed table in the while loop, it does NOT add it to the current table where the button was pressed.

This is the while loop:


<?php 
function knuffix_list ($query, $user_name, $avatar_path, $dbc) {

$data = mysqli_query ($dbc, $query) or die (mysqli_error ($dbc));

//Loop through the array of data

while ($row = mysqli_fetch_array ($data)) {

global $con_id;

$con_id = $row['con_id'];

echo "<table padding='0' margin='0' class='knuffixTable'>";

echo "<tr><td width='65px' height='64px' class='avatar_bg' rowspan='2' colpan='2'><img src='$avatar_path' alt='avatar' /></td>";

echo "<td class='knuffix_username'><strong>" . $user_name . " ___ ";

echo "</strong><br />" . $row['category'] .  " | " . date('M d, Y', strtotime($row['contributed_date'])) . "</td></tr><tr><td>";

echo "<form action='' method='post'>

<button type='submit' name='plusVote' value='like'>Y</button>

<button type='submit' name='minusVote' value='dislike'>N</button>

<input type='hidden' name='hidden_con_id' value='<?= " . $con_id . " ?>' />

</form></td><td class='votes'>Y[ - ] | N[ - ]</td></tr>";

echo "<tr><td class='knuffix_name' colspan='3'><strong>" . htmlentities($row['name']) . "</strong><br /></td></tr>";

echo "<tr><td colspan='2' class='knuffix_contribution'><pre>" . $row['contribution'] . "</pre><br /></td></tr>";

echo "</table>";

}

mysqli_close($dbc);

}

?>


The con_id is the value how I wanted to determine which table it is, when I echo $con_id out (inside the while loop) it's showcasing the numbers correctly, but it doesn't work with the buttons, the buttons simply correspond to the last printed table in the while loop. I think it's because the while loop goes through each row until it's finished and it stops.

This is the rating script:



// RATING SYSTEM

$plus_vote = $_POST['plusVote'];
$minus_vote = $_POST['minusVote'];


if ($plus_vote || $minus_vote) {

$query = "SELECT * FROM con WHERE con_id = '$con_id'";
$query = mysqli_query ($dbc, $query) or die (mysqli_error($dbc)); 
$assoc_vote = mysqli_fetch_assoc ($query);

if ($plus_vote) {

$vote_up = $assoc_vote['likes'] + 1;

$query = "UPDATE con SET likes = '$vote_up' WHERE con_id = '$con_id'";

$query_run = mysqli_query ($dbc, $query) or die (mysqli_error ($dbc)); 

mysqli_close($dbc);

echo "test " . $con_id;

} elseif ($minus_vote) {

$vote_down = $assoc_vote['dislikes'] - 1; 

$query = "UPDATE con SET dislikes = '$vote_down' WHERE con_id = '$con_id'";

$query_run = mysqli_query ($dbc, $query) or die (mysqli_error ($dbc)); 

mysqli_close($dbc);

echo "test " . $con_id;

}
}



If I would be able to make the buttons in the while loop to RECOGNIZE the correct con_id of the table the button was being pressed then the script would work as intended and it would add the vote to the correct row in the table.

How could I solve this problem, because I really have no idea?

Hi, Am working on hooks wit codeigniter, am getting an error after applying hooks like "This webpage has a redirect loop". My hooks.php file : $hook['post_controller_constructor'] = array( 'class' => 'SessionData', 'function' => 'initializeData', 'filename' => 'auth.php', 'filepath' => 'hooks', 'params' => array() ); auth.php file: <?php class SessionData{ var $CI;   function __construct(){ $this->CI =& get_instance(); if(!isset($this->CI->session)) $this->CI->load->library('session'); }   function initializeData() { if(!$this->CI->session->userdata('admin_id')){ redirect('admin'); } } } ?>   Admin controller file: <?php if ( ! defined('BASEPATH')) exit('No direct script access allowed');  

hello, so i have a php login area for my clients...

when i register a client it sets the user level to 1
admin user level is 9

any user whose level i >9 it redirect loops between the directory www.domain.com/ClientArea/

i changed that users level to 9, to see if it would log in, and it did fine...

so i am a bit stuck as to where the problem is?

here are some code snippets you'll need to help me if you can:)
process.php (where the form is sent)
   function procLogin(){
      global $session, $form;
      /* Login attempt */
      $retval = $session->login($_POST['user'], $_POST['pass'], isset($_POST['remember']));
      
      /* Login successful */
      if($retval){
         header("Location: ../ClientArea/");
      }
      /* Login failed */
      else{
         $_SESSION['value_array'] = $_POST;
         $_SESSION['error_array'] = $form->getErrorArray();
         header("Location: ../ClientArea/?login=failed");
      }
   }


session.php (where the magic happens) its inc into the process.php and inc into the index.php of clientarea


   /**
    * startSession - Performs all the actions necessary to 
    * initialize this session object. Tries to determine if the
    * the user has logged in already, and sets the variables 
    * accordingly. Also takes advantage of this page load to
    * update the active visitors tables.
    */
   function startSession(){
      global $database;  //The database connection
      session_start();   //Tell PHP to start the session

      /* Determine if user is logged in */
      $this->logged_in = $this->checkLogin();

      /**
       * Set guest value to users not logged in, and update
       * active guests table accordingly.
       */
      if(!$this->logged_in){
         $this->username = $_SESSION['username'] = GUEST_NAME;
         $this->userlevel = GUEST_LEVEL;
         $database->addActiveGuest($_SERVER['REMOTE_ADDR'], $this->time);
      }
      /* Update users last active timestamp */
      else{
         $database->addActiveUser($this->username, $this->time);
      }
      
      /* Remove inactive visitors from database */
      $database->removeInactiveUsers();
      $database->removeInactiveGuests();
      
      /* Set referrer page */
      if(isset($_SESSION['url'])){
         $this->referrer = $_SESSION['url'];
      }else{
         $this->referrer = "/";
      }

      /* Set current url */
      $this->url = $_SESSION['url'] = $_SERVER['PHP_SELF'];
   }

   /**
    * checkLogin - Checks if the user has already previously
    * logged in, and a session with the user has already been
    * established. Also checks to see if user has been remembered.
    * If so, the database is queried to make sure of the user's 
    * authenticity. Returns true if the user has logged in.
    */
   function checkLogin(){
      global $database;  //The database connection
      /* Check if user has been remembered */
      if(isset($_COOKIE['cookname']) && isset($_COOKIE['cookid'])){
         $this->username = $_SESSION['username'] = $_COOKIE['cookname'];
         $this->userid   = $_SESSION['userid']   = $_COOKIE['cookid'];
      }

      /* Username and userid have been set and not guest */
      if(isset($_SESSION['username']) && isset($_SESSION['userid']) &&
         $_SESSION['username'] != GUEST_NAME){
         /* Confirm that username and userid are valid */
         if($database->confirmUserID($_SESSION['username'], $_SESSION['userid']) != 0){
            /* Variables are incorrect, user not logged in */
            unset($_SESSION['username']);
            unset($_SESSION['userid']);
            return false;
         }

         /* User is logged in, set class variables */
         $this->userinfo  = $database->getUserInfo($_SESSION['username']);
         $this->username  = $this->userinfo['username'];
         $this->userid    = $this->userinfo['userid'];
         $this->userlevel = $this->userinfo['userlevel'];
         $this->firstname = $this->userinfo['firstname'];
         $this->lastname  = $this->userinfo['lastname'];
         $this->company   = $this->userinfo['company'];
         $this->tel       = $this->userinfo['tel'];
         $this->address   = $this->userinfo['address'];
         $this->email   = $this->userinfo['email'];
         return true;
      }
      /* User not logged in */
      else{
         return false;
      }
   }

   /**
    * login - The user has submitted his username and password
    * through the login form, this function checks the authenticity
    * of that information in the database and creates the session.
    * Effectively logging in the user if all goes well.
    */
   function login($subuser, $subpass, $subremember){
      global $database, $form;  //The database and form object

      /* Username error checking */
      $field = "user";  //Use field name for username
      if(!$subuser || strlen($subuser = trim($subuser)) == 0){
         $form->setError($field, "* Username not entered");
      }
      else{
         /* Check if username is not alphanumeric */
         if(!eregi("^([0-9a-z])*$", $subuser)){
            $form->setError($field, "* Username not alphanumeric");
         }
      }

      /* Password error checking */
      $field = "pass";  //Use field name for password
      if(!$subpass){
         $form->setError($field, "* Password not entered");
      }
      
      /* Return if form errors exist */
      if($form->num_errors > 0){
         return false;
      }

      /* Checks that username is in database and password is correct */
      $subuser = stripslashes($subuser);
      $result = $database->confirmUserPass($subuser, md5($subpass));

      /* Check error codes */
      if($result == 1){
         $field = "user";
         $form->setError($field, "* Username or password incorrect");
      }
      else if($result == 2){
         $field = "pass";
         $form->setError($field, "* Username or password incorrect");
      }
      
      /* Return if form errors exist */
      if($form->num_errors > 0){
         return false;
      }

      /* Username and password correct, register session variables */
      $this->userinfo  = $database->getUserInfo($subuser);
      $this->username  = $_SESSION['username'] = $this->userinfo['username'];
      $this->userid    = $_SESSION['userid']   = $this->generateRandID();
      $this->userlevel = $this->userinfo['userlevel'];
      
      /* Insert userid into database and update active users table */
      $database->updateUserField($this->username, "userid", $this->userid);
      $database->addActiveUser($this->username, $this->time);
      $database->removeActiveGuest($_SERVER['REMOTE_ADDR']);

      /**
       * This is the cool part: the user has requested that we remember that
       * he's logged in, so we set two cookies. One to hold his username,
       * and one to hold his random value userid. It expires by the time
       * specified in constants.php. Now, next time he comes to our site, we will
       * log him in automatically, but only if he didn't log out before he left.
       */
      if($subremember){
         setcookie("cookname", $this->username, time()+COOKIE_EXPIRE, COOKIE_PATH);
         setcookie("cookid",   $this->userid,   time()+COOKIE_EXPIRE, COOKIE_PATH);
      }

      /* Login completed successfully */
      return true;
   }