PHP - User's Online

i got my user login and register working with my sql but now if a non logged in user tries to access the shoutbox i want it to redirect them to the register page.

<?PHP

session_start();

if (!(isset($_SESSION['login']) && $_SESSION['login'] != '')) {
header ("Location: /login/main.php");
}

?>



im using that code but even if im logged in, it redirects me to the register page? 

my main site is on the root of the site. the login page and the logged in page is in "/login/

ok i want to make it to where when you look at there profile it will tell you if they are online or not!
how would i do that ? here is my php script that has some modifications on the profile page but wont show if other users are online! here is the login script where i put the session and the profile page.
login.php
Code: [Select]

<?php



// Start Session to enable creating the session variables below when they log in

session_start();

// Force script errors and warnings to show on page in case php.ini file is set to not display them

error_reporting(E_ALL);

ini_set('display_errors', '1');

//-----------------------------------------------------------------------------------------------------------------------------------

// Initialize some vars

$errorMsg = '';

$email = '';

$pass = '';

$remember = '';

if (isset($_POST['email'])) {

    

    $email = $_POST['email'];

    $pass = $_POST['pass'];

    if (isset($_POST['remember'])) {

        $remember = $_POST['remember'];

    }

    $email = stripslashes($email);

    $pass = stripslashes($pass);

    $email = strip_tags($email);

    $pass = strip_tags($pass);

    

    // error handling conditional checks go here

    if ((!$email) || (!$pass)) { 



        $errorMsg = '<font color="red">Please fill in both fields</font>';



    } else { // Error handling is complete so process the info if no errors

        include 'scripts/connect_to_mysql.php'; // Connect to the database

        $email = mysql_real_escape_string($email); // After we connect, we secure the string before adding to query

        //$pass = mysql_real_escape_string($pass); // After we connect, we secure the string before adding to query

        $pass = md5($pass); // Add MD5 Hash to the password variable they supplied after filtering it

        // Make the SQL query

        $sql = mysql_query("SELECT * FROM myMembers WHERE email='$email' AND password='$pass' AND email_activated='1'"); 

        $login_check = mysql_num_rows($sql);

        // If login check number is greater than 0 (meaning they do exist and are activated)

        if($login_check > 0){ 

                while($row = mysql_fetch_array($sql)){

                    

                    // Pleae note: Adam removed all of the session_register() functions cuz they were deprecated and

                    // he made the scripts to where they operate universally the same on all modern PHP versions(PHP 4.0  thru 5.3+)

                    // Create session var for their raw id

                    $id = $row["id"];   

                    $_SESSION['id'] = $id;

                    // Create the idx session var

                    $_SESSION['idx'] = base64_encode("g4p3h9xfn8sq03hs2234$id");

                    // Create session var for their username

                    $username = $row["username"];

                    $_SESSION['username'] = $username;

                    //THIS IS WHERE I EDITED THE SESSION TO SAY IF THERE LOGGED IN OR NOT

                    $logedin = $row['id'];

                    $_SESSION['islogedin']=$logedin;

                    mysql_query("UPDATE myMembers SET last_log_date=now() WHERE id='$id' LIMIT 1");

                    // THIS WAS JUST A TEST BUT WONT UPDATE UNTILL THEY LOGOUT

                    mysql_query("UPDATE myMembers SET online='online' WHERE id='$id' LIMIT 1");

                    

                    

                } // close while

    

                // Remember Me Section

                if($remember == "yes"){

                    $encryptedID = base64_encode("g4enm2c0c4y3dn3727553$id");

                    setcookie("idCookie", $encryptedID, time()+60*60*24*100, "/"); // Cookie set to expire in about 30 days

                    setcookie("passCookie", $pass, time()+60*60*24*100, "/"); // Cookie set to expire in about 30 days

                } 

                // All good they are logged in, send them to homepage then exit script

                header("location: home.php?test=$id"); 

                exit();

    

        } else { // Run this code if login_check is equal to 0 meaning they do not exist

            $errorMsg = "<h3><font color='red'>Email/Password invalid<br /></font></h3><a href='forgot_pass.php'>Forgot password?</a><div align='right'> <br> Forget to activate you account?</div>";

        } 

        



    } // Close else after error checks



} //Close if (isset ($_POST['uname'])){



?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<link rel="icon" href="favicon.ico" type="image/x-icon" />

<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />

<link href="style/main.css" rel="stylesheet" type="text/css" />

<script src="js/jquery-1.4.2.js" type="text/javascript"></script>

<title>Log In</title>

<title>Login Page</title>

   <style type="text/css">

        #stage {

            top: 0px;

            left: 0px;

            z-index: 100;

        }

        .stage {

            position: absolute;

            top: 0;

            left: 0;

            width: 100%;

            min-width: 900px;

            height: 1359px;

            overflow: hidden;

        }

        #bg {

            background: #aedfe5 url(images/sky1.png) 0 0 repeat-x;

        }

        #clouds {

            background: transparent url(images/cloud.png) 305px 10px repeat-x;

        }

        #sun

        {

            background:  url(images/land_sun.gif)0 0 no-repeat;

        }

        #hillbottom

        {

            background: url(images/hill2.png)0 1270px repeat-x;

        }

    </style>

    <link rel="stylesheet" type="text/css" href="css/loginstyle.css" /></head>

<body>

<!-- IE6 fixes are found in styles/ie6.css -->

    <!--[if lte IE 6]><link rel="stylesheet" type="text/css" href="css/ie6.css" /><![endif]-->

   

    <script src="js/jquery-1.3.2.min.js" type="text/javascript"></script>

    <script src="js/jquery-ui-1.7.2.spritely.custom.min.js" type="text/javascript"></script>

    <script src="js/jquery.spritely-0.5.js" type="text/javascript"></script>



    <script type="text/javascript">

    (function($) {

            $(document).ready(function() {

               

               

                   

                var direction = 'left';

               

               



                $('#clouds').pan({fps: 40, speed: 0.5, dir: direction, depth: 10});

               

               

            });

        })(jQuery);

   

    </script><div id="bg" class="stage"></div>

    <div id="container">

    <div id="sun" class="stage"></div>

    <div id="clouds" class="stage">

        <div id="stage" class="stage">

<body>

<div id="behindform">

  <form id="signinform" action="login.php" method="post" enctype="multipart/form-data" name="signinform">

    <fieldset>

   

      <legend>Log in</legend>

     

      <label for="login">Email</label>

      <input type="text" id="email" name="email" />

      <div class="clear"></div>

     

      <label for="password">Password</label>

      <input type="password" id="password" name="pass" />

      <div class="clear"></div>

     

      <label for="remember_me" style="padding: 0;">Remember me?</label>

      <input type="checkbox" id="remember" style="position: relative; top: 3px; margin: 0; " name="remember"/ value="yes" checked="checked">

      <div class="clear"></div>

     

      <br />

     

      <input type="submit" style="margin: -20px 0 0 287px;" class="button" name="commit" value="Sign In"/>

    </fieldset><?php print "$errorMsg"; ?>

  </form>

  </div>

  </div>

  </div><div id="hillbottom" class="stage"> </div>

 

 



 

   

   

</body>

</html>

profile.php This is only a part where i try. but when i putt it on , it wont echo the other peoples on , like it doesnt get the other sessions or somethig
Code: [Select]

//HERE IS WHERE I STARTED , BUT dONT KNOW WHAT TO DO !

if (isset($_SESSION['islogedin']) && $logOptions_id != $id) {

    $isonline = "<font color='green'>online</font>";

}

else{

    $isonline = "<font color='red'>offline</font>";

    }



// This is to Check if user is online or not! needs editing

//$isonline = mysql_query("SELECT online FROM myMembers WHERE id='$logOptions_id'AND online='online'");

//$isonlinecheck=mysql_query($isonline);

//if ($isonlinecheck ="online"){

//$online = "is <font color='green'>online!</font>";}

//else {

//    $online = "is<font color='red'> offline!</font>";

//}

// End to Check if user is online or not!

?>

it displays is online no matter what! please help me!
here is the login.php where the session is started .

login.php
Code: [Select]
<?php

// Start Session to enable creating the session variables below when they log in
session_start();
// Force script errors and warnings to show on page in case php.ini file is set to not display them
error_reporting(E_ALL);
ini_set('display_errors', '1');
//-----------------------------------------------------------------------------------------------------------------------------------
include 'scripts/connect_to_mysql.php'; 
// Connect to the database


// Initialize some vars
$errorMsg = '';
$email = '';
$pass = '';
$remember = '';
if (isset($_POST['email'])) {

$email = $_POST['email'];
$pass = $_POST['pass'];
if (isset($_POST['remember'])) {
$remember = $_POST['remember'];
}
$email = stripslashes($email);
$pass = stripslashes($pass);
$email = strip_tags($email);
$pass = strip_tags($pass);

// error handling conditional checks go here
if ((!$email) || (!$pass)) { 

$errorMsg = '<font color="red">Please fill in both fields</font>';

} else { // Error handling is complete so process the info if no errors

$email = mysql_real_escape_string($email); // After we connect, we secure the string before adding to query
    //$pass = mysql_real_escape_string($pass); // After we connect, we secure the string before adding to query
$pass = md5($pass); // Add MD5 Hash to the password variable they supplied after filtering it
// Make the SQL query
        $sql = mysql_query("SELECT * FROM myMembers WHERE email='$email' AND password='$pass' AND email_activated='1'"); 
$login_check = mysql_num_rows($sql);
        // If login check number is greater than 0 (meaning they do exist and are activated)
if($login_check > 0){ 
     while($row = mysql_fetch_array($sql)){


// Pleae note: Adam removed all of the session_register() functions cuz they were deprecated and
// he made the scripts to where they operate universally the same on all modern PHP versions(PHP 4.0  thru 5.3+)
// Create session var for their raw id
$id = $row["id"];   
$_SESSION['id'] = $id;
// Create the idx session var
$_SESSION['idx'] = base64_encode("g4p3h9xfn8sq03hs2234$id");
                    // Create session var for their username
$username = $row["username"];
$_SESSION['username'] = $username;
//THIS IS WHERE I EDITED THE SESSION TO SAY IF THERE LOGGED IN OR NOT
$_SESSION['logedin'] = $_POST['email'];
                    mysql_query("UPDATE myMembers SET last_activity=now() WHERE id='$id'");
mysql_query("UPDATE myMembers SET last_log_date=now() WHERE id='$id' LIMIT 1");
// THIS WAS JUST A TEST BUT WONT UPDATE UNTILL THEY LOGOUT
                  
                    
                    
     } // close while

     // Remember Me Section
     if($remember == "yes"){
                    $encryptedID = base64_encode("g4enm2c0c4y3dn3727553$id");
         setcookie("idCookie", $encryptedID, time()+60*60*24*100, "/"); // Cookie set to expire in about 30 days
        setcookie("passCookie", $pass, time()+60*60*24*100, "/"); // Cookie set to expire in about 30 days
     } 
     // All good they are logged in, send them to homepage then exit script
     header("location: /socialtscripts/home.php?test=$id"); 
     exit();

} else { // Run this code if login_check is equal to 0 meaning they do not exist
    $errorMsg = "<h3><font color='red'>Email/Password invalid<br /></font></h3><a href='forgot_pass.php'>Forgot password?</a><div align='right'> <br> Forget to activate you account?</div>";
} 


    } // Close else after error checks

} //Close if (isset ($_POST['uname'])){

?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<link href="style/main.css" rel="stylesheet" type="text/css" />
<script src="js/jquery-1.4.2.js" type="text/javascript"></script>
<title>Log In</title>
<title>Login Page</title>
   <style type="text/css">
#stage {
top: 0px;
left: 0px;
z-index: 100;
}
.stage {
position: absolute;
top: 0;
left: 0;
width: 100%;
min-width: 900px;
height: 1359px;
overflow: hidden;
}
#bg {
background: #aedfe5 url(images/sky1.png) 0 0 repeat-x;
}
#clouds {
background: transparent url(images/cloud.png) 305px 10px repeat-x;
}
#sun
{
background:  url(images/land_sun.gif)0 0 no-repeat;
}
#hillbottom
{
background: url(images/hill2.png)0 1270px repeat-x;
}
</style>
<link rel="stylesheet" type="text/css" href="css/loginstyle.css" /></head>
<body>
<!-- IE6 fixes are found in styles/ie6.css -->
<!--[if lte IE 6]><link rel="stylesheet" type="text/css" href="css/ie6.css" /><![endif]-->

<script src="js/jquery-1.3.2.min.js" type="text/javascript"></script>
<script src="js/jquery-ui-1.7.2.spritely.custom.min.js" type="text/javascript"></script>
<script src="js/jquery.spritely-0.5.js" type="text/javascript"></script>

<script type="text/javascript">
(function($) {
$(document).ready(function() {



var direction = 'left';



$('#clouds').pan({fps: 40, speed: 0.5, dir: direction, depth: 10});


});
})(jQuery);

</script><div id="bg" class="stage"></div>
<div id="container">
<div id="sun" class="stage"></div>
<div id="clouds" class="stage">
<div id="stage" class="stage">
<body>
<div id="behindform">
  <form id="signinform" action="login.php" method="post" enctype="multipart/form-data" name="signinform">
    <fieldset>
   
      <legend>Log in</legend>
     
      <label for="login">Email</label>
      <input type="text" id="email" name="email" />
      <div class="clear"></div>
     
      <label for="password">Password</label>
      <input type="password" id="password" name="pass" />
      <div class="clear"></div>
     
      <label for="remember_me" style="padding: 0;">Remember me?</label>
      <input type="checkbox" id="remember" style="position: relative; top: 3px; margin: 0; " name="remember"/ value="yes" checked="checked">
      <div class="clear"></div>
     
      <br />
     
      <input type="submit" style="margin: -20px 0 0 287px;" class="button" name="commit" value="Sign In"/>
    </fieldset><?php print "$errorMsg"; ?>
  </form>
  </div>
  </div>
  </div><div id="hillbottom" class="stage"> </div>
 
 

 
   
   
</body>
</html>and then this is the profile.php where i see if there online , i could only put sertian  areas , script is too big
profile.php
Code: [Select]
<?php
//on top of the page where it checks the session and updates the time
// This updates the database correctly
if( isset($_SESSION['logedin']) ) {
mysql_query("UPDATE myMembers SET last_activity=now() WHERE id='$logOptions_id'");
// this is where it selects the users id but it wont work , it says online for every user!
$age= 60;
if( isset($_SESSION['logedin']) ) {
$q = mysql_query('SELECT id=`$logOptions_id`, DATE_FORMAT(`last_activity`,"%a, %b %e %T") as `last_activity`,UNIX_TIMESTAMP(`last_activity`) as `last_activity_stamp`FROM `mymembers`WHERE `$logOptions_id` <> "'.($_SESSION['logedin']).'"');
$isonlinecheck = mysql_query($q);
if ($isonlinecheck ="last_activity_stamp" + $age < time()){
$isonline =  "is <font color='green'>online!</font>";}
else {
$online = "is<font color='red'> offline!</font>";
}

}
?>
PLEASE HELP ME

im trying to count and display the number on users on my site this is the coding im using cant see where im going wrong, its inserted into the data base correctly but wont delete after 60 seconds,

cheers matt



$session=session_id();
$time=time();
$time_check=$time-60;

$sql="SELECT * FROM onlineusers WHERE session='$session'";
$result=mysql_query($sql);

$count=mysql_num_rows($result);

if($count=="0"){
$sql1="INSERT INTO onlineusers(session, time, username)VALUES('$session', '$time', '$username')";
$result1=mysql_query($sql1);
}
else {
"$sql2=UPDATE onlineusers SET time='$time' WHERE session = '$session'";
$result2=mysql_query($sql2);
}

$sql3="SELECT * FROM onlineusers";
$result3=mysql_query($sql3);

$count_user_online=mysql_num_rows($result3);


$sql4="DELETE FROM onlineusers WHERE time<$time_check";
$result4=mysql_query($sql4);

ok well i have this is online script that starts at the login page where it sets  a session. well it echos that that person is online even if they are not, i will have all of the code only for the online script so it will be in peaces.
ok so here is the login page where the session is started
login.php

Code: [Select]
<?php
//ok so if they submit the page and its all right and they login , here is the session that is set for the person, again its just the piece of the script .
$_SESSION['logedin'] = $_POST['email'];
                    mysql_query("UPDATE myMembers SET last_activity=now() WHERE id='$id'");
?>
now here is where i call on the session and see if there online , the profile.php is set up to where it sees if it is your profile or not so $logoptions_id is the id that they are logged in as.
profile.php
Code: [Select]
<?php
// this is on top of the page , where the session is called and if they are logged in it updates the database where there id is. 
if( isset($_SESSION['logedin']) ) {
mysql_query("UPDATE myMembers SET last_activity=now() WHERE id='$logOptions_id'");// there is where $logOptions_id comes in.
}
// now this is further down the page(script) where we see if they are logged in or not.
$age= 60; //set a variable called age, assign an integer of 60 to it.
if( isset($_SESSION['logedin']) ) { 
$q = 'SELECT id=`$id`, DATE_FORMAT(`last_activity`,"%a, %b %e %T") as `last_activity`,UNIX_TIMESTAMP(`last_activity`) as `last_activity_stamp`FROM `mymembers`WHERE `$id` <> \''.($_SESSION['logedin']).'\''; 
$isonlinecheck = mysql_query($q);
$row = mysql_fetch_assoc($isonlinecheck); 
if (($row['last_activity_stamp'] + $age)< time()){
$isonline =  "is <font color='green'>online!</font>";} 
else {
$isonline = "is<font color='red'> offline!</font>";
}

}
?>
i wana thank all who helps! your all greatly appreciated