session variables - how to go to the same page after login in php page -


i have search page in wich pop bob open , after pop login want redirect same url means url not changed .so how can redairect....

this search page pop code .

<div id="light">     <form action="tutors_login1.php" method="post" name="form">      <center>     <table>         <tr><td>             please login         </td></tr>         <tr><td>             user email <input type="text" name="email" />         </td></tr>         </tr><td>             password <input type="password" name="password" />         </td></tr>         <tr><td>         <input type="submit" name="submitbut" value="login" />         </td></tr>                        </table>     </center>      </form> </div>  <div id="fade" onclick="lightbox_close();"></div>

this login page code in redairect page

if($flagl=='lgin'){         header('location: my_account.php'); }  $tabl = 'tutor';  if($_post['submitbut'] == 'login') {     $stateid=$_request['country'];     $cityid=$_request['state'];     $areaid=$_request['city'];      $email = mysql_real_escape_string($_post['email']);      $password = mysql_real_escape_string($_post['password']);      $sql = "select * $tabl email='$email' , password='$password' , app='1'";      $exec = mysql_query($sql);      $num = mysql_num_rows($exec);      if($num == 1) {         $fetch = mysql_fetch_assoc($exec);         $_session['login'] = $fetch['uniq'];         $_session['email'] = $fetch['email'];          $email = $_session['email'];          $_session['type'] = 'tutor';          header("location: latest_tuition_jobs.php");      }         if($sql1 = "select * $tabl email='$email' , password='$password' , app='0'")         {             $exec1 = mysql_query($sql1);              $flag_r1 = 'r'; } else {         $flag_r = 'r';     } }

you have use 

$_server['http_referer'];

as per php docs states :

the address of page (if any) referred user agent current page. set user agent. not user agents set this, , provide ability modify http_referer feature. in short, cannot trusted.

which interpreted if try access page log in only, need log in. once log in login take referring or last page , can go business.

also please stop using mysql_ depretiated , should not used new code. (or old code matter). please refactor code pdo or might fall victim inject attacks. if need setting pdo please let me know , assist :)


Comments

Post a Comment

Popular posts from this blog

Why does Ruby on Rails generate add a blank line to the end of a file? -

running rails generate controller foo home results in: class foocontroller < application controller def home end end (there's nothing on line in actual file, blank line) is there purpose blank line? it's common use newline indicate end of line, last line. many editors (like vi, use) add in newline silently. consensus text files (especially in unix world) should end in newline, , there have been problems historically if wasn't present. why should text files end newline? the tool used count lines in file "wc" counts newlines in file, without trailing newline show 3 instead of 4. it improves readability of templates used in generator. consider: https://github.com/rails/rails/blob/master/railties/lib/rails/generators/rails/controller/templates/controller.rb to remove trailing newline, template have last line of: end<% end -%> instead of: end <% end -%> that seems less readable me. the discussion below refers
Read more

keyboard - Smiles and long press feature in Android -

i've created android keyboard. how add features inserting smilies, , using long keypresses display symbols? to create long-press behavior allows select several options pop-up menu, follow guide (specifically pop-up menu section): http://developer.android.com/guide/topics/ui/menus.html smileys (also known emoticons) combination of keys, understood programs , parsed same way. have do, when clicks smiley face on keyboard, simulate pressing of key combination matching emoticon. example, when clicks smiley, should simulate key presses ':' , ')' :). here's list of emoticons: http://en.wikipedia.org/wiki/list_of_emoticons
Read more

node.js - Bad Request - node js ajax post -

i'm using express 3.0 , node v0.11.0. have button submits form , i'm using ajax post data json object node server. client code is: $('#contact').submit(function(e) { console.log('submit called'); var formdata = json.stringify($('form').serializeobject()); console.log(formdata); $.ajax({ url: "http://localhost:3000/savedata/", type: "post", datatype: 'json', data: {objectdata: formdata}, contenttype: "application/json", complete: function() { console.log('process complete'); }, success: function(data) { console.log('process sucess'); }, error: function() { console.log('process error'); }, }); return false; }); then on server: var express = require('express'); var app = express(); app.set('views', __dirname + '/views'); app.set('view engine', 'jade'); app.use(express.bodyparser());
Read more