PHP Dreamweaver and "Restrict Access to Page"

[Macnimation]

Hi,

I have created a page called members.php which contains information from a
MYSQL database, amazingly it works.

When I log in from the page login.php, the members.php page displays fine, if
i put in the wrong username and password, it does go to the error.php page as
required.

Since everything is working fine, I decided to restrict anyone from accessing
the members.php page directly, as you would, by configuring the Restrict Access
to Page Server Behaviour.

It is set to go to another page called deniedaccess.php to differentiate
between an incorrect login and direct attempt to access the page.

When I do this, even if I log in correctly via the log in page, I am sent to
the deniedaccess.php page.

If I try directly I am also sent to the deniedaccess.php page as expected.

If I remove the Restrict Access to Page behaviour the log in works again. But
I can access the members.php page directly.

Any suggestions?

cheers

[Ross Riley]

Hello.

If you post the relevant code that checks for access privilege, i'll have a look

[Macnimation]

Hi,

Thanks for the quick response

I'll get back to you on the code.

If it's any help, the authentication is only based on username and password in
the mysql database.

I haven't added the Access level as an option, but I think that doesn't matter
with this issue?

Cheers

[David Powers]

Macnimation wrote:

> If I remove the Restrict Access to Page behaviour the log in works again. But
> I can access the members.php page directly.

It's a bug that I notified to Macromedia over a year ago. They
acknowledged it as being "high severity", and then did nothing about it.
The analysis - and solution - is here:

[url]http://friendsofed.infopop.net/2/OpenTopic?a=tpc&s=989094322&f=8033053165&m=3241024 21&r=324102421#324102421[/url]

You need read only the first post (from me).

--
David Powers
Author, "Foundation PHP 5 for Flash" (friends of ED)
Co-author "PHP Web Development with DW MX 2004" (Apress)
[url]http://computerbookshelf.com[/url]

[dean_shagrath87@yahoo.com]

use dreamweaver cs5. it has the ability to restrict.