change the first line to
if(!IsSet($stage)){ print("<form name=\"login\" action=\"$PHP_SELF\" method=\"POST\">"); HTH ----- Original Message ----- From: "David Orn Johannsson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, March 25, 2002 11:16 AM Subject: [PHP] Login displays the pass and user in url Can I some how prevent the browser from displayin index.php?passwd=pass&user=user in the url when I use this script I wrote. <?php if(!IsSet($stage)){ print("<form name=\"login\" action=\"$PHP_SELF\">"); print("<input type=\"hidden\" name=\"stage\" value=\"1\">"); print("<table>"); print("<tr><td class=\"maintext\"><b>Notendanafn:</b></td><td><input name=\"check_username\" type=\"text\"></td></tr>"); print("<tr><td class=\"maintext\"><b>Lykilorð:</b></td><td><input name=\"check_passwd\" type=\"password\"></td></tr>"); print("<td> </td><td><input type=\"submit\" value=\"Skrá inn\"></td></tr>"); print("</table>"); } else{ include("db_connect.php"); $query = "select id, passwd, system from users where username = '$check_username'"; $mysql_result = mysql_query($query, $db); $row = mysql_fetch_row($mysql_result); if((crypt($check_passwd, 'dominos') == $row[1]) && (($system == 0 || $system == 1 ))){ $sid = session_id(); $uid = $row[0]; print("<a href=\"news.php\">[Fréttir]</a><br>"); print("<a href=\"sms.php\">[SMS - Auglýsingar]</a><br>"); } else if($session == session_id()){ print("<a href=\"news.php\">[Fréttir]</a><br>"); print("<a href=\"sms.php\">[SMS - Auglýsingar]</a><br>"); } else{ print("Þú verður að skrá þig inn. <a href=\"index.php\">[Skrá inn]</a>"); } } ?> <http://www.atom.is/> ------------------------ Davíð Örn Jóhannssson Vefforritari ------------------------ Atómstöðin hf. Garðastræti 37 101 Reykjavík ------------------------ sími: 595-3643 fax: 595-3649 <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED] <http://www.atom.is/> http://www.atom.is ------------------------ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php