Protect Pages

[Aaron1988]

hey i have a login script and its working fine but i want to protect the page so if peopel not logged in that cant view the pageso i put this code

<?
include("Login/include/session.php");
if($session->logged_in){
echo "You are viewing the protected page";
}
else{
echo "You are not allowed to view this page";
}
?>


at the top of the page before any code and at top it says

You are not allowed to view this page

but it still views the page heres an example

www.3d-modelling-art-online.com/Gallery.php

could any one help please

[jimz]

Use this...

else{
echo "You are not allowed to view this page";
die();
}

In your original code, you are echoing some text, but after it's done that, it will continue through the rest of your code!

die(); will kill the script. You could also use exit(); instead...

You can also redirect them with the code below. You should still use die after the redirect.

else{
header("location : http://www.differentpage.com");
die();
}

Cheers,
Jim.

[Aaron1988]

but before the else code above it dont u have to put <? so it recordnises the code mate

and as i am beginner at this lol where should i put the code so it works make and is that code right because at beginning doesnt it have to have <? and at end of code doesnt ti ahve to be ?>

Thanx
Aaron

[Gee Bee]

The code needs to go at the very top of the page, what jimz says will work but for easy of typing he just didnt put the full code in. All he means is that underneath the line that says
echo "You are not allowed to view this page";
you should put the die statement - die();
You are also using short hand php tags, instead of using <? and ?> to denote php you should use <?php, the reason is that the tag <? can be interpreted differently depending on the server you use where as <?php is standard on all php installed servers

[Aaron1988]

i am a beginner lol can you show me the example of the cod ein full so i can jsut copy and paste it in my website please because i am a total beginner

well i done it but when i use the redirect code doesnt redirect me ?