1. Home
2. authentication - Restrict PHP file if user is not logged in?

641 votes

1 answers

authentication - Restrict PHP file if user is not logged in?

Get the solution ↓↓↓

I'm trying to prevent not signed in users to my webpage access to a certain file. I have this if statement at the top of the file I want to have restricted access.

<?php
    session_start();
    if (isset($_SESSION['user']) && $_SESSION['user'] == true) {
        echo "Welcome to the member's area, " . $_SESSION['user'] . "!";
    } else {
         echo "Please log in first to see this page.";
         header ('index.php');
    }
 ?>
Copy code

The thing is that if I'm signed in I do get the "Welcome to members area". And if I'm not signed in I get echo "Please log in first to see this page. However the HTML in the restricted is still showing. The user name and password are stored in a MySQL database.

Undefined asked

2021-12-5

Write your answer

---

826

votes

Answer

Solution:

It's probably better to reverse the order that you do this, so you don't have to contain all of your code in a block, and you can kill your page if the user is not logged in.

session_start();

//empty does both of the checks you are doing at once
//check if user is logged in first
if(empty($_SESSION['user'])) {

    //give error and start redirection to login page
    //you may never see this `echo` because the redirect may happen too fast
    echo "Please log in first to see this page.";
    header('Location: index.php');

    //kill page because user is not logged in and is waiting for redirection
    die();
}

echo "Welcome to the member's area, " . $_SESSION['user'] . "!";

//more page code here
Copy code

Write your answer

---

Share solution ↓

Additional Information:

Date the issue was resolved:

2021-12-5

Link To Source
Link To Answer People are also looking for solutions of the problem: your lock file does not contain a compatible set of packages. please run composer update

Didn't find the answer?

Our community is visited by hundreds of web development professionals every day. Ask your question and get a quick answer for free.

Ask a Question

---

Similar questions

Find the answer in similar questions on our website.

201 installation - How to install PHP in IIS 7.5, Windows Server 2008 R2 (64bits)

404 Form action is not using the PHP file?

979 soap - Is it possible to specify the outgoing network interface to use for a PHP SoapClient?

690 php - Avoiding including abstract class in a general 'bootstrap' file

687 php - Insert Variable into Laravel CSV file import array

494 php - Getting "Call to undefined function: 'define': in phalanger web site

855 php - Magento import - Skip row sku is not defined

114 How to check whether $_GET['id'] is set and it's not empty using php

359 oop - php - access class parent variable not using $this

124 php - Variable disappearing after adding text

Write quick answer

Do you know the answer to this question? Write a quick response to it. With your help, we will make our community stronger.

About the technologies asked in this question

PHP

PHP (from the English Hypertext Preprocessor - hypertext preprocessor) is a scripting programming language for developing web applications. Supported by most hosting providers, it is one of the most popular tools for creating dynamic websites. The PHP scripting language has gained wide popularity due to its processing speed, simplicity, cross-platform, functionality and distribution of source codes under its own license.
https://www.php.net/

MySQL

DBMS is a database management system. It is designed to change, search, add and delete information in the database. There are many DBMSs designed for similar purposes with different features. One of the most popular is MySQL. It is a software tool designed to work with relational SQL databases. It is easy to learn even for site owners who are not professional programmers or administrators. MySQL DBMS also allows you to export and import data, which is convenient when moving large amounts of information.
https://www.mysql.com/

HTML

HTML (English "hyper text markup language" - hypertext markup language) is a special markup language that is used to create sites on the Internet. Browsers understand html perfectly and can interpret it in an understandable way. In general, any page on the site is html-code, which the browser translates into a user-friendly form. By the way, the code of any page is available to everyone.
https://www.w3.org/html/