p?= systeem.

Gestart doorSanderc4 mrt 201221 reacties35 weergaven

22 berichten · pagina 2 van 2

Guillamos

Lid

Berichten: 832
Reputatie: 0
Punten: 0,00

Lid sinds: 2011
Laatst gezien: 12 jun 2025

4 mrt 2012, 12:12

#16

In 2 includes staat session_start() of er is output boven je session_start().

Sanderc

Lid · Topicstarter

Berichten: 11.263
Reputatie: 0
Punten: 0,00

Lid sinds: 2011
Laatst gezien: 12 jun 2025

4 mrt 2012, 12:13

#17

Het speelt zich af in functions:

Spoiler tonen

[COLOR= #0000BB]<?php[/COLOR]
[COLOR= #FF8000]// Functions file:
// ToDo: IPlocking (W.I.P)
// ToDo: POST-check + if-statement for $bericht + locationheader (W.I.P)[/COLOR]

[COLOR= #007700]function[/COLOR] sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$data[/COLOR][COLOR= #007700]) {[/COLOR]
[COLOR= #0000BB]$data[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_real_escape_string"]mysql_real_escape_string[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$data[/COLOR][COLOR= #007700]);[/COLOR]
[URL="http://www.php.net/return"]return[/URL] [COLOR= #0000BB]$data[/COLOR][COLOR= #007700];
}[/COLOR]



[COLOR= #FF8000]// Make MySQL-database connection[/COLOR]
[COLOR= #007700]@[/COLOR][URL="http://www.php.net/mysql_connect"]mysql_connect[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$server[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$user[/COLOR][COLOR= #007700],[/COLOR][COLOR= #0000BB]$pass[/COLOR][COLOR= #007700])[/COLOR] or [URL="http://www.php.net/die"]die[/URL] [COLOR= #007700]([/COLOR][COLOR= #DD0000]"Cant connect to MySQL database server"[/COLOR][COLOR= #007700]);
@[/COLOR][URL="http://www.php.net/mysql_select_db"]mysql_select_db[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$database[/COLOR][COLOR= #007700])[/COLOR] or [URL="http://www.php.net/die"]die[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"Cant find database."[/COLOR][COLOR= #007700]);[/COLOR]

[COLOR= #FF8000]// Start here the login action, and make the random hash[/COLOR]
[URL="http://www.php.net/if"]if[/URL][COLOR= #007700](([/COLOR][COLOR= #0000BB]$_SERVER[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]REQUEST_METHOD[/COLOR][COLOR= #007700]] ==[/COLOR] [COLOR= #DD0000]"POST"[/COLOR][COLOR= #007700]) && ([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]login[/COLOR][COLOR= #007700]])) {[/COLOR]
     [COLOR= #0000BB]$selectleden[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM $ledentabel WHERE username = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]username[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]" AND password = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]password[/COLOR][COLOR= #007700]])).[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
     [URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/mysql_num_rows"]mysql_num_rows[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$selectleden[/COLOR][COLOR= #007700])) {[/COLOR]
                                      [COLOR= #FF8000]// Ingelogd[/COLOR]
                                      [COLOR= #0000BB]$hash[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/uniqid"]uniqid[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/rand"]rand[/URL][COLOR= #007700](),[/COLOR] true[COLOR= #007700]));[/COLOR]
                                      [COLOR= #0000BB]$get_id[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT id FROM "[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$ledentabel[/COLOR][COLOR= #007700].[/COLOR][COLOR= #DD0000]" WHERE username = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]username[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]" AND password = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]password[/COLOR][COLOR= #007700]])).[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
                                      [COLOR= #0000BB]$fetch_id[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$get_id[/COLOR][COLOR= #007700]);[/COLOR]
                                      [COLOR= #0000BB]$insert_session[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"INSERT INTO sessions (id, userid, hash, logintime) VALUES (,"[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$fetch_id[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]id[/COLOR][COLOR= #007700]].[/COLOR][COLOR= #DD0000]","[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$hash[/COLOR][COLOR= #007700].[/COLOR][COLOR= #DD0000]",NOW())"[/COLOR][COLOR= #007700]);[/COLOR]

                                      [COLOR= #FF8000]// for debugging:
                                      #$bericht = "Ingelogd met hash: ".$hash." En je hebt id-nummer:".$fetch_id[id];[/COLOR]


                                      [URL="http://www.php.net/if"]if[/URL] [COLOR= #007700]([/COLOR][COLOR= #0000BB]$insert_session[/COLOR][COLOR= #007700]) {[/COLOR]
                                         [URL="http://www.php.net/setcookie"]setcookie[/URL] [COLOR= #007700]([/COLOR][COLOR= #DD0000]"id"[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$fetch_id[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]id[/COLOR][COLOR= #007700]],[/COLOR][URL="http://www.php.net/time"]time[/URL][COLOR= #007700]()+[/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]sessiontime[/COLOR][COLOR= #007700]]);[/COLOR]
                                         [URL="http://www.php.net/setcookie"]setcookie[/URL] [COLOR= #007700]([/COLOR][COLOR= #DD0000]"hash"[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$hash[/COLOR][COLOR= #007700],[/COLOR][URL="http://www.php.net/time"]time[/URL][COLOR= #007700]()+[/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]sessiontime[/COLOR][COLOR= #007700]]);[/COLOR]
                                         [URL="http://www.php.net/header"]header[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]location:menu.php[/COLOR][COLOR= #007700]);
                                                           }[/COLOR] [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
                                                           [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"Fout in de query: "[/COLOR][COLOR= #007700].[/COLOR][URL="http://www.php.net/mysql_error"]mysql_error[/URL][COLOR= #007700]();[/COLOR]
                                                           [URL="http://www.php.net/exit"]exit[/URL][COLOR= #007700]();
                                                           }
                                      }[/COLOR]  [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
                                      [COLOR= #FF8000]// Foute pass[/COLOR]
                                      [COLOR= #0000BB]$bericht[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"<b>Je inloggegevens komen niet overeen met wat in de database staan.</b>"[/COLOR][COLOR= #007700];
                                      }



                                                                           }[/COLOR]

[COLOR= #FF8000]// here is the function for the login-check[/COLOR]
[COLOR= #007700]function[/COLOR] checklogin[COLOR= #007700]() {[/COLOR]
[URL="http://www.php.net/if"]if[/URL] [COLOR= #007700]([/COLOR][URL="http://www.php.net/mysql_num_rows"]mysql_num_rows[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT userid, `hash` FROM `sessions` WHERE `userid` = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_COOKIE[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]id[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]" AND `hash` = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_COOKIE[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]hash[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]))) {[/COLOR]
        [COLOR= #0000BB]$return[/COLOR]  [COLOR= #007700]=[/COLOR] TRUE[COLOR= #007700];
    }[/COLOR] [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
        [COLOR= #0000BB]$return[/COLOR] [COLOR= #007700]=[/COLOR] FALSE[COLOR= #007700];
    }[/COLOR]

    [URL="http://www.php.net/return"]return[/URL] [COLOR= #0000BB]$return[/COLOR][COLOR= #007700];
}[/COLOR]

[COLOR= #FF8000]// Data uit leden-tabel oproepen ($get_userdata[username], $get_userdata[warnings][/COLOR]
[COLOR= #0000BB]$get_data_qry[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT userid, `hash` FROM `sessions` WHERE `userid` = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_COOKIE[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]id[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]" AND `hash` = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_COOKIE[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]hash[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$get_data[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$get_data_qry[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$get_userdata[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM $ledentabel WHERE id = "[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$get_data[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]userid[/COLOR][COLOR= #007700]].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]));[/COLOR]



?>

Ik zie de fout niet, want normaal werkt dat

Wouterp

Lid

Berichten: 1.631
Reputatie: 0
Punten: 0,00

Lid sinds: 2010
Laatst gezien: 12 jun 2025

4 mrt 2012, 12:52

#18

Sandcool schreef:
Het speelt zich af in functions:

Spoiler tonen

[COLOR= #0000BB]<?php[/COLOR]
[COLOR= #FF8000]// Functions file:
// ToDo: IPlocking (W.I.P)
// ToDo: POST-check + if-statement for $bericht + locationheader (W.I.P)[/COLOR]

[COLOR= #007700]function[/COLOR] sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$data[/COLOR][COLOR= #007700]) {[/COLOR]
[COLOR= #0000BB]$data[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_real_escape_string"]mysql_real_escape_string[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$data[/COLOR][COLOR= #007700]);[/COLOR]
[URL="http://www.php.net/return"]return[/URL] [COLOR= #0000BB]$data[/COLOR][COLOR= #007700];
}[/COLOR]



[COLOR= #FF8000]// Make MySQL-database connection[/COLOR]
[COLOR= #007700]@[/COLOR][URL="http://www.php.net/mysql_connect"]mysql_connect[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$server[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$user[/COLOR][COLOR= #007700],[/COLOR][COLOR= #0000BB]$pass[/COLOR][COLOR= #007700])[/COLOR] or [URL="http://www.php.net/die"]die[/URL] [COLOR= #007700]([/COLOR][COLOR= #DD0000]"Cant connect to MySQL database server"[/COLOR][COLOR= #007700]);
@[/COLOR][URL="http://www.php.net/mysql_select_db"]mysql_select_db[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$database[/COLOR][COLOR= #007700])[/COLOR] or [URL="http://www.php.net/die"]die[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"Cant find database."[/COLOR][COLOR= #007700]);[/COLOR]

[COLOR= #FF8000]// Start here the login action, and make the random hash[/COLOR]
[URL="http://www.php.net/if"]if[/URL][COLOR= #007700](([/COLOR][COLOR= #0000BB]$_SERVER[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]REQUEST_METHOD[/COLOR][COLOR= #007700]] ==[/COLOR] [COLOR= #DD0000]"POST"[/COLOR][COLOR= #007700]) && ([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]login[/COLOR][COLOR= #007700]])) {[/COLOR]
     [COLOR= #0000BB]$selectleden[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM $ledentabel WHERE username = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]username[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]" AND password = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]password[/COLOR][COLOR= #007700]])).[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
     [URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/mysql_num_rows"]mysql_num_rows[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$selectleden[/COLOR][COLOR= #007700])) {[/COLOR]
                                      [COLOR= #FF8000]// Ingelogd[/COLOR]
                                      [COLOR= #0000BB]$hash[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/uniqid"]uniqid[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/rand"]rand[/URL][COLOR= #007700](),[/COLOR] true[COLOR= #007700]));[/COLOR]
                                      [COLOR= #0000BB]$get_id[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT id FROM "[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$ledentabel[/COLOR][COLOR= #007700].[/COLOR][COLOR= #DD0000]" WHERE username = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]username[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]" AND password = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][URL="http://www.php.net/md5"]md5[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]password[/COLOR][COLOR= #007700]])).[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
                                      [COLOR= #0000BB]$fetch_id[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$get_id[/COLOR][COLOR= #007700]);[/COLOR]
                                      [COLOR= #0000BB]$insert_session[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"INSERT INTO sessions (id, userid, hash, logintime) VALUES (,"[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$fetch_id[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]id[/COLOR][COLOR= #007700]].[/COLOR][COLOR= #DD0000]","[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$hash[/COLOR][COLOR= #007700].[/COLOR][COLOR= #DD0000]",NOW())"[/COLOR][COLOR= #007700]);[/COLOR]

                                      [COLOR= #FF8000]// for debugging:
                                      #$bericht = "Ingelogd met hash: ".$hash." En je hebt id-nummer:".$fetch_id[id];[/COLOR]


                                      [URL="http://www.php.net/if"]if[/URL] [COLOR= #007700]([/COLOR][COLOR= #0000BB]$insert_session[/COLOR][COLOR= #007700]) {[/COLOR]
                                         [URL="http://www.php.net/setcookie"]setcookie[/URL] [COLOR= #007700]([/COLOR][COLOR= #DD0000]"id"[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$fetch_id[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]id[/COLOR][COLOR= #007700]],[/COLOR][URL="http://www.php.net/time"]time[/URL][COLOR= #007700]()+[/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]sessiontime[/COLOR][COLOR= #007700]]);[/COLOR]
                                         [URL="http://www.php.net/setcookie"]setcookie[/URL] [COLOR= #007700]([/COLOR][COLOR= #DD0000]"hash"[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$hash[/COLOR][COLOR= #007700],[/COLOR][URL="http://www.php.net/time"]time[/URL][COLOR= #007700]()+[/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]sessiontime[/COLOR][COLOR= #007700]]);[/COLOR]
                                         [URL="http://www.php.net/header"]header[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]location:menu.php[/COLOR][COLOR= #007700]);
                                                           }[/COLOR] [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
                                                           [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"Fout in de query: "[/COLOR][COLOR= #007700].[/COLOR][URL="http://www.php.net/mysql_error"]mysql_error[/URL][COLOR= #007700]();[/COLOR]
                                                           [URL="http://www.php.net/exit"]exit[/URL][COLOR= #007700]();
                                                           }
                                      }[/COLOR]  [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
                                      [COLOR= #FF8000]// Foute pass[/COLOR]
                                      [COLOR= #0000BB]$bericht[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"<b>Je inloggegevens komen niet overeen met wat in de database staan.</b>"[/COLOR][COLOR= #007700];
                                      }



                                                                           }[/COLOR]

[COLOR= #FF8000]// here is the function for the login-check[/COLOR]
[COLOR= #007700]function[/COLOR] checklogin[COLOR= #007700]() {[/COLOR]
[URL="http://www.php.net/if"]if[/URL] [COLOR= #007700]([/COLOR][URL="http://www.php.net/mysql_num_rows"]mysql_num_rows[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT userid, `hash` FROM `sessions` WHERE `userid` = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_COOKIE[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]id[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]" AND `hash` = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_COOKIE[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]hash[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]))) {[/COLOR]
        [COLOR= #0000BB]$return[/COLOR]  [COLOR= #007700]=[/COLOR] TRUE[COLOR= #007700];
    }[/COLOR] [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
        [COLOR= #0000BB]$return[/COLOR] [COLOR= #007700]=[/COLOR] FALSE[COLOR= #007700];
    }[/COLOR]

    [URL="http://www.php.net/return"]return[/URL] [COLOR= #0000BB]$return[/COLOR][COLOR= #007700];
}[/COLOR]

[COLOR= #FF8000]// Data uit leden-tabel oproepen ($get_userdata[username], $get_userdata[warnings][/COLOR]
[COLOR= #0000BB]$get_data_qry[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT userid, `hash` FROM `sessions` WHERE `userid` = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_COOKIE[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]id[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]" AND `hash` = "[/COLOR][COLOR= #007700].[/COLOR]sqlsafe[COLOR= #007700]([/COLOR][COLOR= #0000BB]$_COOKIE[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]hash[/COLOR][COLOR= #007700]]).[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$get_data[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$get_data_qry[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$get_userdata[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM $ledentabel WHERE id = "[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$get_data[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]userid[/COLOR][COLOR= #007700]].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]));[/COLOR]



?>

Ik zie de fout niet, want normaal werkt dat

Multisess? Werkte bij mij ook niet je kan beter even Aarclay een PB sturen.

Antonn

Lid

Berichten: 8.649
Reputatie: 0
Punten: 0,00

Lid sinds: 2010
Laatst gezien: 12 jun 2025

4 mrt 2012, 12:54

#19

Luukvdo schreef:

html, header enzo
[COLOR= #0000BB]<?php[/COLOR]
    [URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/isset"]isset[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_GET[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]p[/COLOR][COLOR= #007700]]))
    {[/COLOR]
        
        [URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/file_exists"]file_exists[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]pages/[/COLOR] [COLOR= #007700].[/COLOR] [URL="http://www.php.net/str_replace"]str_replace[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]/[/COLOR][COLOR= #007700],[/COLOR][COLOR= #DD0000][/COLOR][COLOR= #007700],[/COLOR][COLOR= #0000BB]$_GET[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]p[/COLOR][COLOR= #007700]]) .[/COLOR] [COLOR= #DD0000].php[/COLOR][COLOR= #007700]))[/COLOR]
            [URL="http://www.php.net/require"]require[/URL] [COLOR= #DD0000]pages[/COLOR] [COLOR= #007700].[/COLOR] [URL="http://www.php.net/str_replace"]str_replace[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]/[/COLOR][COLOR= #007700],[/COLOR][COLOR= #DD0000][/COLOR][COLOR= #007700],[/COLOR][COLOR= #0000BB]$_GET[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]p[/COLOR][COLOR= #007700]]) .[/COLOR] [COLOR= #DD0000].php[/COLOR][COLOR= #007700];[/COLOR]
        
        [URL="http://www.php.net/else"]else[/URL]
            [URL="http://www.php.net/require"]require[/URL] [COLOR= #DD0000]pages/404.php[/COLOR][COLOR= #007700];
        
    }[/COLOR]
    [URL="http://www.php.net/else"]else[/URL]
        [URL="http://www.php.net/require"]require[/URL] [COLOR= #DD0000]pages/home.php[/COLOR][COLOR= #007700];[/COLOR]
?>
footer

Ik heb hem iets aangepast. Deze code zet je in index.php
Op de plek van html, header enzo zet je de header e.d. neer, footer de footer.
Je hebt een map pages nodig. Daarin moet je minimaal deze bestanden hebben: 404.php (als de pagina niet bestaat) en home.php (hier kom je standaard op uit)

Je vergeet beveiliging?

Jenner

Lid

Berichten: 1.544
Reputatie: 0
Punten: 0,00

Lid sinds: 2008
Laatst gezien: 2 feb 2024

4 mrt 2012, 13:07

#20

Is het niet mooi om dit te doen? http://www.example.nl/index.php/testpagina

Thom

Lid

Berichten: 10.654
Reputatie: 0
Punten: 0,00

Lid sinds: 2010
Laatst gezien: 16 sep 2020

4 mrt 2012, 13:08

#21

Jenner schreef:
Is het niet mooi om dit te doen? http://www.example.nl/index.php/testpagina

Dan eerder

http://www.example.nl/textpagina

?

Jenner

Lid

Berichten: 1.544
Reputatie: 0
Punten: 0,00

Lid sinds: 2008
Laatst gezien: 2 feb 2024

4 mrt 2012, 13:12

#22

Thommiee schreef:
Eerdere citaten tonen
Jenner schreef:
Is het niet mooi om dit te doen? http://www.example.nl/index.php/testpagina
Dan eerder

http://www.example.nl/textpagina

?

Ja, maar door hem door te sturen naar http://www.example.nl/index.php/testpagina (Door htaccess dus je ziet wel gewoon http://www.example.nl/textpagina) Vind ik persoonlijker netter, omdat je dan misschien ?p= nog ergens anders voor kunt gebruiken

Dan kan je namelijk http://www.example.nl/textpagina?p=hoihoi aanroepen en doet hij eigenlijk http://www.example.nl/index.php/textpagina?p=hoihoi en anders doet hij: http://www.example.nl/index.php?p=textpagina&p=hoihoi en dat betekent dat hij hoihoi krijgt voor p

Jouw reactie

Deel je idee, stel een vraag of help een ander verder.