[PHP] Help Needed

[Pushpinder Singh Garcha]

Hello All:

I am using PHP and MySQL in my application. I need to be able to allow ONLY authorized users access to some pages in the site. For this I am creating a session variable ''$valid_user", after the user has successfully authenticated himself with the Database. The pages that need to be protected are all HTML files. So far everything, works fine. I am wondering how to finally deploy the logic on all the pages that need to be protected.

Here is my point of view.

1). Change all the names of the protected documents to .php
2). Use the following script:


<? session_start(); ?>

if (session_is_registered($valid_user)) {

// show the original page

PLEASE TELL me a way to display the same page

}


elseif (!session_is_registered($valid_user)) {

// display an error message to the user asking him to login before he can see this page

}

many thanks
--Pushpinder Singh


Pushpinder Singh Garcha
_________________________________
Web Architect