Skip to main content
J
jeffmg
Known Participant
May 4, 2010
Question

login then go direct to personal download page

  • May 4, 2010
  • 1 reply
  • 781 views

Hi - I can't get my head round how I can accomplish this. I have a db table where users can have up to 10 items to download, the idea being that each of these will be personal to that user. What I want to be able to do is have a login page where the user will enter their username and password, then be taken direct to "their" download page. I've put together a login page and a download results page in PHP, and although I can get the login page to redirect to the results page, nothing's appearing on that page...

I assume that there must be a way of coding the redirect part of the page so that it's looking for a user id to display the correct results, but I can't see where this would go.

Any assistance with this would be greatly appreciated.

This topic has been closed for replies.

1 reply

A
Anonymous
May 4, 2010

On the download page create a recordset and filter the recordset where session variable = table row for users ID then place the bindings on the page for the recordset.

J
jeffmgAuthor
Known Participant
May 4, 2010

Hi - thanks for the suggestion. I've tried that and am having problems still - nothing displays on the results page. When you enter the username and password, it redirects to the results page and there's a box where the results should be appearing, but no results....

this is the code for the search page (login page):

<?php require_once('Connections/connSRSclients.php');?>

<?php

if (!function_exists("GetSQLValueString")) {

function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")

{

  $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {

    case "text":

      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";

      break;   

    case "long":

    case "int":

      $theValue = ($theValue != "") ? intval($theValue) : "NULL";

      break;

    case "double":

      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";

      break;

    case "date":

      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";

      break;

    case "defined":

      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;

      break;

  }

  return $theValue;

}

}

$colname_rsClients = "-1";

if (isset($_SESSION['client_id'])) {

  $colname_rsClients = (get_magic_quotes_gpc()) ? $_SESSION['client_id'] : addslashes($_SESSION['client_id']);

}

mysql_select_db($database_connSRSclients, $connSRSclients);

$query_rsClients = sprintf("SELECT * FROM clients WHERE client_id = %s", GetSQLValueString($colname_rsClients, "int"));

$rsClients = mysql_query($query_rsClients, $connSRSclients) or die(mysql_error());

$row_rsClients = mysql_fetch_assoc($rsClients);

$totalRows_rsClients = mysql_num_rows($rsClients);

?><?php

// *** Validate request to login to this site.

if (!isset($_SESSION)) {

  session_start();

}

$loginFormAction = $_SERVER['PHP_SELF'];

if (isset($_GET['accesscheck'])) {

  $_SESSION['PrevUrl'] = $_GET['accesscheck'];

}

if (isset($_POST['username'])) {

  $loginUsername=$_POST['username'];

  $password=$_POST['password'];

  $MM_fldUserAuthorization = "";

  $MM_redirectLoginSuccess = "download_Results.php";

  $MM_redirectLoginFailed = "index.html";

  $MM_redirecttoReferrer = false;

  mysql_select_db($database_connSRSclients, $connSRSclients);

  $LoginRS__query=sprintf("SELECT client_user, client_pass FROM clients WHERE client_user=%s AND client_pass=%s",

    GetSQLValueString($loginUsername, "text"), GetSQLValueString($password, "text"));

  $LoginRS = mysql_query($LoginRS__query, $connSRSclients) or die(mysql_error());

  $loginFoundUser = mysql_num_rows($LoginRS);

  if ($loginFoundUser) {

     $loginStrGroup = "";

    //declare two session variables and assign them

    $_SESSION['MM_Username'] = $loginUsername;

    $_SESSION['MM_UserGroup'] = $loginStrGroup;      

    if (isset($_SESSION['PrevUrl']) && false) {

      $MM_redirectLoginSuccess = $_SESSION['PrevUrl'];

    }

    header("Location: " . $MM_redirectLoginSuccess );

  }

  else {

    header("Location: ". $MM_redirectLoginFailed );

  }

}

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml"><!-- InstanceBegin template="/Templates/basic.dwt" codeOutsideHTMLIsLocked="false" -->

<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />

<!-- InstanceBeginEditable name="doctitle" -->

<title>Search clients</title>

<!-- InstanceEndEditable -->

<style type="text/css">

<!--

-->

</style>

<link href="style.css" rel="stylesheet" type="text/css" />

<!-- InstanceBeginEditable name="head" -->

<link href="WA_DataAssist/styles/Refined_Pacifica.css" rel="stylesheet" type="text/css" />

<link href="WA_DataAssist/styles/Arial.css" rel="stylesheet" type="text/css" />

<script language='JavaScript' type='text/javascript' src='JScript/formValidator.js'></script>

<script>

function validateWADASearchForm(formNode){

  var formValidatorInstance = new FormValidator(formNode);

  formValidatorInstance.addRule('S_client_pass','Sorry, you don\'t appear to be registered','required');

  return formValidatorInstance.validate();

}

</script><!-- InstanceEndEditable -->

</head>

<body>

<div id="wrapper">

  <div id="header"><img src="images/logo3-1.jpg" width="398" height="104" /></div>

  <div id="content"><!-- InstanceBeginEditable name="contentRight" -->

  <div id="contentright">

    <div id="contentright3">

      <form id="form1" name="form1" method="POST" action="<?php echo $loginFormAction; ?>">

        <table width="100%" border="0" cellspacing="5" cellpadding="2">

          <tr>

            <td>Username:</td>

            <td><input name="username" type="text" id="username" size="35" /></td>

          </tr>

          <tr>

            <td>Password:</td>

            <td><input name="password" type="password" id="password" size="35" /></td>

          </tr>

          <tr>

            <td><input type="submit" name="Submit" value="Login" /></td>

            <td> </td>

          </tr>

        </table>

      </form>

    </div>

    <div id="3picsport"><img src="images/3port.jpg" width="139" height="458" /></div>

  </div>

  <!-- InstanceEndEditable -->

    <div id="contentleft">

      <div id="menu"><a href="index.html">HOME</a><br />

        <a href="portfoliodesign.html">PORTFOLIO DESIGN</a><br />

        <a href="download_Search.php">CLIENT LOGIN</a><br />

        <a href="marketblog.php">MARKET BLOG</a><br />

        <a href="contact.html">CONTACT US</a>  </div>

          <div id="leftpicmarket"></div>

    </div>

  </div>

  <div class="clr"></div>

  <div id="footer">

    <div id="adress">client address</div>

  </div>

</div>

</body>

<!-- InstanceEnd --></html>

<?php

mysql_free_result($rsClients);

?>

--------------------------------------------

this is the code for the results page:

<?php require_once('Connections/connSRSclients.php'); ?>

<?php

if (!function_exists("GetSQLValueString")) {

function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")

{

  $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {

    case "text":

      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";

      break;   

    case "long":

    case "int":

      $theValue = ($theValue != "") ? intval($theValue) : "NULL";

      break;

    case "double":

      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";

      break;

    case "date":

      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";

      break;

    case "defined":

      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;

      break;

  }

  return $theValue;

}

}

$colname_rsClients = "-1";

if (isset($_SESSION['client_id'])) {

  $colname_rsClients = (get_magic_quotes_gpc()) ? $_SESSION['client_id'] : addslashes($_SESSION['client_id']);

}

mysql_select_db($database_connSRSclients, $connSRSclients);

$query_rsClients = sprintf("SELECT * FROM clients WHERE client_id = %s", GetSQLValueString($colname_rsClients, "int"));

$rsClients = mysql_query($query_rsClients, $connSRSclients) or die(mysql_error());

$row_rsClients = mysql_fetch_assoc($rsClients);

$totalRows_rsClients = mysql_num_rows($rsClients);

?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml"><!-- InstanceBegin template="/Templates/basic.dwt" codeOutsideHTMLIsLocked="false" -->

<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />

<!-- InstanceBeginEditable name="doctitle" -->

<title>Results clients</title>

<!-- InstanceEndEditable -->

<style type="text/css">

<!--

-->

</style>

<link href="style.css" rel="stylesheet" type="text/css" />

<!-- InstanceBeginEditable name="head" -->

<style type="text/css">

<!--

.style1 {

color: #1CA8E2;

font-weight: bold;

}

.style2 {

color: #323232;

font-weight: bold;

}

-->

</style><!-- InstanceEndEditable -->

</head>

<body>

<div id="wrapper">

  <div id="header"><img src="images/logo3-1.jpg" width="398" height="104" /></div>

  <div id="content"><!-- InstanceBeginEditable name="contentRight" -->

  <div id="contentright">

    <div id="contentright3">Downloadable items for

      <span class="style2"><?php echo $row_rsClients['client_fullname']; ?></span>

      <div id="portfoliodocs"><span class="style1">Portfolio documents:</span><br />

          <a href="downloads/<?php echo $row_rsClients['upload1']; ?>"><?php echo $row_rsClients['upload1']; ?></a><br />

          <a href="downloads/<?php echo $row_rsClients['upload2']; ?>"><?php echo $row_rsClients['upload2']; ?></a><br />

          <a href="downloads/<?php echo $row_rsClients['upload3']; ?>"><?php echo $row_rsClients['upload3']; ?></a><br />

  <a href="downloads/<?php echo $row_rsClients['upload4']; ?>"><?php echo $row_rsClients['upload4']; ?></a><br />

  <a href="downloads/<?php echo $row_rsClients['upload5']; ?>"><?php echo $row_rsClients['upload5']; ?></a><br />

  <a href="downloads/<?php echo $row_rsClients['upload6']; ?>"><?php echo $row_rsClients['upload6']; ?></a><br />

  <a href="downloads/<?php echo $row_rsClients['upload7']; ?>"><?php echo $row_rsClients['upload7']; ?></a><br />

  <a href="downloads/<?php echo $row_rsClients['upload8']; ?>"><?php echo $row_rsClients['upload8']; ?></a><br />

  <a href="downloads/<?php echo $row_rsClients['upload9']; ?>"><?php echo $row_rsClients['upload9']; ?></a><br />

  <a href="downloads/<?php echo $row_rsClients['upload10']; ?>"><?php echo $row_rsClients['upload10']; ?></a><br />

        <br />

  </div>

    </div>

    <div id="3picsport"><img src="images/3port.jpg" width="139" height="458" /></div>

  </div>

  <!-- InstanceEndEditable -->

    <div id="contentleft">

      <div id="menu"><a href="index.html">HOME</a><br />

        <a href="portfoliodesign.html">PORTFOLIO DESIGN</a><br />

        <a href="download_Search.php">CLIENT LOGIN</a><br />

        <a href="marketblog.php">MARKET BLOG</a><br />

        <a href="contact.html">CONTACT US</a>  </div>

          <div id="leftpicmarket"></div>

    </div>

  </div>

  <div class="clr"></div>

  <div id="footer">

    <div id="adress">client address</div>

  </div>

</div>

</body>

<!-- InstanceEnd --></html>

<?php

mysql_free_result($rsClients);

?>

--------------------------------------------

A
Anonymous
May 5, 2010

For the result page... update the recordset by filter it as below

This will show the record based on login username and make sure you restrict the page with username and password, or maybe also with user level if u have one. I guess u have username row in your client table. If u dont then u just need to join the client table with the user table.

Firefly Community Gallery
Adobe Firefly

Remix with Firefly Community Gallery

Thousands of free creations to fall in love with and remix in Firefly.

Explore now
Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices