Thanks, but that's not on the login.php page, only on all the protected pages.

Sam

Curt Zirzow wrote:

* Thus wrote Sam Folk-Williams ([EMAIL PROTECTED]):

Problem: instead of sending them to the page they wanted to view, they get sent to this URL: login.php?file=/dir/file_name.php?v=123

What's going on here? Why doesn't "Location: $file" return the contents of $file? The session check as well as login.php code are below. I'm stumped here -- thanks!


////----ON EVERY PAGE IN SITE----//////


//get name of file user is trying to view
$file=$PHP_SELF."?".$_SERVER['QUERY_STRING'];
// session check
session_start();
if (!session_is_registered("SESSION"))
{
        // if session check fails, invoke error handler
        header("Location: index.php?file=$file");
        exit();
}


If this is on the login.php, $file has been set here.  That will overwrite
your $file paramater (assuming your using register globals.) Thus
you get your behaviour of url:

login.php?file=/dir/file_name.php?v-123

HTH,

Curt


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Reply via email to