where are they being displayed?

-----Original Message-----
From: David Orn Johannsson [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 25, 2002 10:17 AM
To: [EMAIL PROTECTED]
Subject: [PHP] Login displays the pass and user in url


Can I some how prevent the browser from displayin
index.php?passwd=pass&user=user in the url when I use this script I
wrote.
 
                          <?php
                                    if(!IsSet($stage)){
                                    print("<form name=\"login\"
action=\"$PHP_SELF\">");
                                    print("<input type=\"hidden\"
name=\"stage\" value=\"1\">");
                                    print("<table>");
                                    print("<tr><td
class=\"maintext\"><b>Notendanafn:</b></td><td><input
name=\"check_username\" type=\"text\"></td></tr>");
                                    print("<tr><td
class=\"maintext\"><b>Lykilorđ:</b></td><td><input name=\"check_passwd\"
type=\"password\"></td></tr>");
                                    print("<td>&nbsp;</td><td><input
type=\"submit\" value=\"Skrá inn\"></td></tr>");
                                    print("</table>");
                                    }
                                    else{
 
include("db_connect.php");
                                                $query = "select id,
passwd, system from users where username = '$check_username'";
                                                $mysql_result =
mysql_query($query, $db);
                                                $row =
mysql_fetch_row($mysql_result);
                                                
                                                if((crypt($check_passwd,
'dominos') == $row[1]) && (($system == 0 || $system == 1 ))){
                                                            $sid =
session_id();
                                                            $uid =
$row[0];
                                                            print("<a
href=\"news.php\">[Fréttir]</a><br>");
                                                            print("<a
href=\"sms.php\">[SMS - Auglýsingar]</a><br>");
                                                }
                                                else if($session ==
session_id()){
                                                            print("<a
href=\"news.php\">[Fréttir]</a><br>");
                                                            print("<a
href=\"sms.php\">[SMS - Auglýsingar]</a><br>");
                                                }
                                                else{
                                                            print("Ţú
verđur ađ skrá ţig inn. <a href=\"index.php\">[Skrá inn]</a>");
                                                }
                                    }
                          ?>
 
 <http://www.atom.is/> ------------------------
Davíđ Örn Jóhannssson
Vefforritari
------------------------
Atómstöđin hf.
Garđastrćti 37
101 Reykjavík
------------------------
sími: 595-3643
fax: 595-3649
 <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
 <http://www.atom.is/> http://www.atom.is
------------------------
 

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to