UserID's and Custom Pages

**foe** · 06-28-2002, 04:27 AM

Yeh definetly there are a ton of solutions including a custom script, icq/aim me if you still need help

**mike503** · 06-30-2002, 11:26 AM

what you're asking for is a simple dynamic "main page" which reads the userid from a session variable, cookie, post variable, or get/query string parameter. it's not hard at all. in fact, you spend more effort asking around about this than the actual coding would have taken

if foe's too busy or something, hit me up too.

**CunnyFunt** · 06-30-2002, 04:57 PM

Like mike said, coding a simple perl/php script would have taken less time. This is assuming that you know how to script.

There's also alternative methods, such as manipulating RewriteRule's in .htaccess, or virtualhost containers. It'll take a little research on your part, but it can be done.

Your best bet is to learn a good and easy scripting language and code out your members area to be dynamic (scripted). If you don't have the time for this, hire someone to do so for you, though it may cost a bit due to the significant need to have the entire members portion of the site a script, so that your site stays as secure as possible.

**Buba_Smith2** · 07-01-2002, 12:06 AM

<HEAD>
 
<SCRIPT LANGUAGE="JavaScript">
 


 

</SCRIPT>
 

 
<BODY>
 
<center>
<form name=login>
<table width=225 border=1 cellpadding=3>
<tr><td colspan=2><center>Members-Only Area!</center></td></tr>
<tr><td>Username:</td><td><input type=text name=username></td></tr>
<tr><td>Password:</td><td><input type=text name=password></td></tr>
<tr><td colspan=2 align=center><input type=button value="Login!" onClick="Login()"></td></tr>
</table>
</form>
</center>
 
<center>
Free JavaScripts provided 
by <a href="http://javascriptsource.com">The JavaScript Source</a>
</center>

**CunnyFunt** · 07-01-2002, 10:11 PM

Buba, that a workable javascript if his site is "free", but provides no security if he runs a paysite (which I'm assuming he does).

**foe** · 07-02-2002, 08:40 AM

Bubba What happens though if a user clicks view source? .... he will see all member passwords needles to say DO NOT USE THAT SCRIPT no security what so over,

btw give me a link to your paysite I want some free porn

**CunnyFunt** · 07-02-2002, 10:54 AM

If your site is a paysite, use .htaccess as your auth method and then try something like this as your index page (index.php):

PHP Code:

<?

if (getenv('REMOTE_USER')) {
  $remote_user = getenv('REMOTE_USER');

  switch($remote_user) {
    case "userone" :
      include "userone.html";
      break;
    case "usertwo" :
      include "usertwo.html";
      break;
    default
      include "regindex.html";
      break;
  }
}
else {
  echo "You didn't log in.";
}

?>

This way requires you to keep editing the .php file and adding new "case" checks for the switch() method.

Alternatively you can make everything more automated by setting up a mysql database that tracks certain users like:

users
-----------------------------
|username | htmlpage |
-----------------------------

This way you can do something like:

PHP Code:

<?

if (getenv('REMOTE_USER')) {
  $remote_user = getenv('REMOTE_USER');

  @ $db = mysql_pconnect("localhost","mysqluser", "mysqlpass");
  mysql_select_db("mysqldatabase");

  $result = mysql_query("SELECT htmlpage FROM users WHERE username='$remote_user'");

  if (mysql_num_rows($result) > 0) {
    $row = mysql_fetch_array($result);

    include $row['htmlpage'];
  }
  else {
    include "regindex.html";
  }
}
else {
  echo "You didn't log in!";
}

?>

Then you just add users you want to see diff index pages up by setting up a simple script like so:

PHP Code:

<?

if (getenv('QUERY_STRING')) {
  if (!isset($username)) { echo "Missing Username Param"; exit; }
  elseif (!isset($htmlpage)) { echo "Missing HTMLPage Param"; exit; }
  else {
    @ $db = mysql_pconnect("localhost","mysqluser", "mysqlpass");  
    mysql_select_db("mysqldatabase");

    $result = mysql_query("INSERT INTO users SET username='$username', htmlpage='$htmlpage'");
    if (mysql_affected_rows($result) > 0) {
      echo "User added!";
    }
    else {
      echo "Unable to add user!";
    }
  }
}
else {
  echo "Query String needed: mydomain.com/securefolder/adduserpage.php?username=desireduser&htmlpage=desired.html";
}

?>

Then just goto the php like so: mydomain.com/securefolder/adduserpage.php?username=desireduser&htmlpage=desi red.html

Modifying the existing users, or deleting them is as simple as copying your "add" script and modifying the "$result = ...." line to look like:

(modify)

PHP Code:

$result = mysql_query("UPDATE users SET htmlpage='$htmlpage' WHERE username='$username'");

(delete)

PHP Code:

$result = mysql_query("DELETE FROM users WHERE username='$username'");

I dunno if there's any bugs in the above, cuz I'm doing it as I go (probably a typo somewhere), but is should work.

**Buba_Smith2** · 07-02-2002, 11:19 PM

no security. No one said you have to let people read your source files. Can't read mine.

**mike503** · 07-03-2002, 12:41 AM

never use client-side javascript for anything unless it's something server-side scripting cannot do.

**foe** · 07-03-2002, 07:15 AM

Originally posted by Buba_Smith2
no security. No one said you have to let people read your source files. Can't read mine.

If its based in javascript all they need to do is right click and press view source

UserID's and Custom Pages

UserID's and Custom Pages

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment