PHP - Dissecting A Dynamic Cookie

Hey PHPFreaks!

I have a problem with my login script, because when i login it sets a cookie and it all works. But when i got redirected and refresh the page, my script turns an error which says i'm not logged in? how come?

This is what finds the cookie and redirects me

Code: [Select]
if(!isset($_SESSION['auth']) && !isset($_COOKIE['authcookie'])) {
        $_SESSION['ERROR'] = 7;
        header('location: index.php?login');
    }

Ok I have my login form and previously I was using $_SESSION untill I learned this removes data when browser is closed. Someone said to me to use cookies but I have no clue where to begin on setting a cookie or reading information from it.

Can anyone point me to a tutorial on cookies?

Hi,
I was trying to use setcookie on my website but when I try to use, it wasn't setting anything and then I tried to make sure if it's setting something, I added
Code: [Select]
echo $_COOKIE;But it shows Array (just the word) instead of tblogvalue.

This is the code I'm using;
Code: [Select]
$Month = 2592000 + time();
setcookie(tblog, tblogvalue, $Month);

echo $_COOKIE;

if a user clicks ?hide=1 or ?hide=2

it
does

Code: [Select]
if (isset($_GET['hide'])){
$id = intval($_GET['hide']);
setcookie('hide', ''.$id.'',time()+32000000);
header('Location: index.php');
exit;
}
How do I make it so if they click ?hide=1 it ad's 1, but what if they do ?hide=2 also? it would need to be 1,2  not just 2.

I have part of my script that I have used many times in many diffrent applications that works just fine.
But in this use it refuses to set the cookie or do anything besides the redirect for that matter.
// if login is ok then we add a cookie 
  $ip = $_SERVER['REMOTE_ADDR'];
$datem = date("j F Y, g:i a");
mysql_query("UPDATE YBK_Login SET date = '$datem' AND ip = '$ip' WHERE ID = '{{$info['ID']}'")or die(mysql_error()); 

   $_POST['username'] = stripslashes($_POST['username']); 
   $hour = time() + 3600; 
 setcookie('ID_WatsonN', $_POST['username'], 0); 
 setcookie('Key_WatsonN', $_POST['pass'], 0);
 setcookie('UID_WatsonN', $info['ID'], 0);
 setcookie('LOGIN', $info['ID'], time()+3);
 //then redirect them to the members area 
  Header("Location: dashboard.php"); 

how can i  set cookie like a*dm*n@**t*r*c**.*c**  ??

Code: [Select]
$cookkiee = $islem_1['mail'] ;
$sayisi = strlen($cookkiee)-1 ;
$cok =  $islem_1['mail'] ;
for($i=0;$i<=$sayisi;$i++) {
$sifr = rand(0,2);
if($sifr ==0) { $cok[$i]= '*';  }
$dizik =  $cok[$i]; 
setrawcookie("kayip",$dizik,time()+(60*30),"/");
$_COOKIE['kayip'] = $dizik;

echo $dizi  // etc . a*dm*n@**t*r*c**.*c**
}

echo $_COOKIE['kayip']; // etc. just one char being like  random  a

Hi all,

I'm struggling with a program I'm trying to write with cookies, so any help would be very much appreciated!!

What I'm wanting to do is when someone visits my site, I want to display content until the end of the day, and once the days up it disappears forever/until the cookies are deleted.

Could someone help me with this?

Thanks lots in advance,

Jake

Can you send a cookie through ajax?  Will it still be read by the browser?

I was told that my login page could easily be manipulated to set themselves as my username (Mod Justin), giving them powers. How can I further secure my website's use of cookies?

Quote

I just visited your site as you - Mod Justin, simply by setting a 'user' cookie for your domain with your username in it.

Your login code is NOT effective at stopping anyone or any bot script from impersonating any of the users, even impersonating you.



My login code:

http://pastebin.com/cBLybGKq

Any possible solution to this?

Hi All,

I have a secure website which always checks the cookies is not expired and the session id is set.
When someone doesn't browse for the period of the cookie it will expire however the session id stays valid
until he logout. A lot of people don't logout so the pages will still be accessable for them or others who use
their pc.

Is there a way to destroy the session id when the cookies expires?

Marco

Hi,
I'm trying to set cookie but all in vain. I've already posted my php code in my last post. "COOKIE PROBLEM". I think there is nothing wrong with code. may be i need to enable to load some library or something in xampp. Is there anyone who knows what setting do i need to do for enable cookies and in which file?
Please help

I'm not really sure if this is a cookie problem but that's all I could think of. I have a web site that users have to log into. I have seen that when I log out of my account and log into my test account my main user name will still show on the welcome page unless I let the computer sit for a bit or if I clear recent history. This happens in all the main browsers. I have also started having a problem where if I update something in my database it shows up in MySQL right away but can take a while to show up on the web page unless i clear the history. Not sure what code to post to give you an idea so if you want to see something let me know and I will put it up.

Thank you

Hi again all,

I wondered if anyone could help again (sorry).  I have one single page which I would like to record a cookie when the user hits submit. The next time the user visits the site, I want it to recall the cookie and put the value in the textbox on the page. I think I have it storing the cookie (not sure though), but I am having trouble getting it to recall in the text box.  I wondered if someone could look at this code and see where I am going wrong or help with what I need to add.  New to PHP so having trouble getting my head around things.  Thanks in advance.

Code: [Select]
<? setcookie('user',$userName,(time()+60*60*24*30) ); ?>
<style type="text/css">


<!--
body,td,th {
color: #FFFFFF;
}
body {
background-color: #000000;
}
.style1 {font-family: Verdana, Arial, Helvetica, sans-serif}
-->


</style><form id="form1" name="form1" method="post" action="">
  <label>
  <div align="center" class="style1"><strong>My Timetable Search</strong><br />
    <br />
    Enter Network User ID:<br />
    <input type="text" name="txtUserID" id="txtUserID"  value=""/>
  </div>
  <p align="center">
    <label>
    <input type="submit" name="cmdGo" id="cmdGo" value="Show Timetable" onclick="setcookie('user',$userName,(time()+60*60*24*30);"/>
    </label>
    <br />
  </p>
  <hr />
</form>
<div align="center">
  <?php


$userName = $_POST["txtUserID"];
$hostname = "xxxxx";
$dbuser = "xxxxx";
$dbpassword = "xxxxxx";
$dbname = "xxxxx";
$LessonCount = 0;

     $db_link=mysql_connect($hostname, $dbuser, $dbpassword)
     or die("Unable to connect to the server!");

     mysql_select_db($dbname)
     or die("Unable to connect to the database");

        $fields_array=array();
        $num_fields=0;
        $num_row=0;
       

$sql= "SELECT core.UserID, wstt.Period, wstt.Lesson, wstt.Staff, wstt.Room FROM wstt INNER JOIN core ON wstt.Adno = core.Adno WHERE core.UserID='$userName'";


    

// find position of "FROM" in query
        $fpos=strpos($sql, 'from');

        // get string starting from the first word after "FROM"
        $strfrom=substr($sql, $fpos+5, 50);

        // Find position of the first space after the first word in the string
        $Opos=strpos($strfrom,' ');

        //Get table name. If query pull data from more then one table only first table name will be read.
        $table=substr($strfrom, 0,$Opos);

           // Get result from query
            $result=mysql_query($sql);
            $num_row=mysql_numrows($result);

            print('<html>');
            print('<head><title>');
  print('Timetable for'.$userName.'</title>');
            print('<link rel="stylesheet" href="style.css">');

            print("</head>");
            print('<body><br>');
print('<h3>Timetable for: '.$userName.'</h3>');
print('<div align="center"');


            if($num_row >0)
            {
                    //Get number of fields in query
                    $num_fields=mysql_num_fields($result);

         

           # get column metadata
            $i = 1;

             //Set table width 10% for each column
            $width=10 * $num_fields;

           // print('<br><table width='.$width.'% align="center" border=1> padding=0<tr>');
print('<br><table width='.$width.'% border="1" cellpadding="0" cellspacing="0" bordercolor="#000066"<tr>');
            print('<tr><th colspan='.$num_fields.'>Timetable List</th></tr>');




             while ($i < $num_fields)
             {

              //Get fields (columns) names
            $meta = mysql_fetch_field($result);

            $fields_array[]=$meta->name;

           //Display column headers in upper case
       print('<th><b>'.strtoupper($fields_array[$i]).'</b></th>');

                    $i=$i+1;
                    }

            print('</tr>');
                


                   //Get values for each row and column
                while($row=mysql_fetch_row($result))
                {
                 print('<tr>');
 
  
 
 
//SET TO 1 TO HIDE USERNAME
                        for($i=1; $i<$num_fields; $i++)
                        {

                        //Display values for each row and column
                        print('<td>'.$row[$i].'</td>');



                        }


//START
if ($LessonCount ==4) {
print('<tr>');
print('<td colspan="4"><div align="center">-----------------------------------------------------</td></tr>');
$LessonCount=0;
}else {
($LessonCount = $LessonCount+1);
}


//STOP


                print('</tr>');
                }


    }


print('</div>');


    ?>
</div>

I am working on a website that depends on a complex cookie being set. In an effort to fix problems before they become big problems, I want to monitor that the cookie is getting set correctly with a cron job. I can setup the cron job just fine, but I can't figure out how to get the value of the cookie.

By visiting the main site the cookie is set automatically, and I've also made a special script on that server that only gets me that cookie value and spits it out. I am trying to use cURL to call the main page, and then right after that, call the get-cookie.php page which should then have cookie data to display.

Here is how I am trying to do it now:
<?php

$c = curl_init();

// making the initial call to the real website
curl_setopt($c, CURLOPT_URL, 'http://domain.com');
curl_setopt($c, CURLOPT_HEADER, false);
curl_exec($c);

curl_close($c);

$c = curl_init();

// now making a call to the script that spits out the cookie
curl_setopt($c, CURLOPT_RETURNTRANSFER, true);
curl_setopt($c, CURLOPT_URL, 'http://domain.com/get-cookie.php');
curl_setopt($c, CURLOPT_HEADER, false);

$output = curl_exec($c);

curl_close($c);

echo 'output: ' . $output . "\n\n";

?>

I've tried a few different things here, but so far no luck. Anyone have any ideas on how I can make this work? Thanks so much!

I'm having trouble setting a cookie in php.  When a user logs in I send an ajax request to an file which contains this code to set the cookie


setcookie("userCookie", $_SESSION['username'], time()+60*60*24*30);


However when I include the following code to check to see if the cookie has been set is says is hasn't


if(isset($_COOKIE['userCookie'])) {
echo("cookie set");
} else { echo("cookie not set"); }


I check to see that my browser is accepting cookies and it definitely is so I'm not sure what causing the problem. 

Thanks for any help.