php coding website password protect

**pbmods** · Sep 20 '07, 10:52 PM

Heya, George.

You are getting this error because your script outputs something before it has a chance to send the header data.

Is there any whitespace before your opening <?php tag, by any chance?

**ronverdonk** · Sep 20 '07, 10:54 PM

I will show the text of an article by wildteen88, june 2006, who can explain this a lot better then I can.

The reason why you are getting this message is because you have may have/be:

Whitespace before the opening php tag <?php

Outputting something to the browser before you use session_start, header, setcookie etc

session_start, setcookie, header and a few other functions write header information to the web server/browser what to do. Such as when you use session_start it requests the browser to create a cookie which stores the PHPSESSID.

If you have output before you use these functions then they are unable to send new header information as it has already been sent in the form text/html, and so you get the headers already sent error message.

You can easily find the source of the problem by looking at the error message. As the answer is actully in there, but most people dont notice it as they may not understand what the error means. So lets take this error message as an example:

Warning: Cannot modify header information - headers already sent by (output started at C:\server\www\t est.php:6) in C:\server\www\t est.php on line 8

Now PHP has given us a clue here as it has told use where the output has started! Have look where it says output started at and it gives you the full path to the file and the line number. Now the line number that it stats is not usually where the output has started but where the output has ended, becuase the output could be above that line.
So lets look at test.php:
[code=php]
1 <html>
2 <head>
3 <title>Header test</title>
4 </head>
5 <body>
6 <?php
7
8 header("Locatio n: http://www.google.com" );
9
10 ?>
11 </body>
12 </html>[/code]As you can see line 6 is the opening PHP tag (< ?php) this isn't the output but look above that line you'll notice it has some HTML code. This html code is the cause of the error!

So when you get this error message again look for the clue where it says output started at and goto the file and line number it says. Look above the line number and find where your output is located to.

Hope that helps you understand why your are getting this error message. (Thanks to wildteen88)

Ronald

**Porkie999** · Sep 21 '07, 03:08 PM

hi guys i still dont understand what you mean.so here is the full code of exactly what it looks like on dreamweaver.ple ase edit the code so i can understand where iam going wrong.

regards
george
thanks for all replies
PHP CODE[code=php]
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dt d">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Please Login</title>

<?php
$myusername = "myusername ";
$mypassword = "mypassword ";
$areaname = "My Protected Area";

if ($_SERVER ["PHP_AUTH_U SER"] == ""||$_SERVE R ["PHP_AUTH_P W"] == ""||
$_SERVER["PHP_AUTH_U SER"]!= $myusername ||$_SERVER["PHP_AUTH_P W"]!=
$mypassword) {
header ("HTTP/1.0 401 Unauthorized");
header ("WWW-Authenticate: Basic realm =\"$areaname\"" );

echo"<h1>Author ization Required.</h1>";
die();
}

?>
</head>

<body>[/code]

my main text.
</body>
</html>

**bergy** · Sep 21 '07, 04:13 PM

The HTML before your PHP is what's causing those errors...

This Code: [HTML]<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dt d">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Please Login</title>
[/HTML]
Should be under the PHP - so your code should look like this:[PHP]
<?php
$myusername = "myusername ";
$mypassword = "mypassword ";
$areaname = "My Protected Area";

if ($_SERVER ["PHP_AUTH_U SER"] == ""||$_SERVE R ["PHP_AUTH_P W"] == ""||
$_SERVER["PHP_AUTH_U SER"]!= $myusername ||$_SERVER["PHP_AUTH_P W"]!=
$mypassword) {
header ("HTTP/1.0 401 Unauthorized");
header ("WWW-Authenticate: Basic realm =\"$areaname\"" );
die();
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dt d">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Please Login</title>
</head>

<body>
my main text.
</body>
</html>
[/PHP]

If you want to add your Authorization Required string, I suggest adding some PHP tags after <body>, checking a variable you set to see if someone is logged in or not, and based on that outputting "my main text" or "authorizat ion required".

The reason you get this error is because absolutely NOTHING can be sent to the browser (even one space before your beginning <?php tag) before you use the header(); function.

**Porkie999** · Sep 21 '07, 04:25 PM

thanks alot for all replies greatly appreciated.

Cheers
George

very happy :)

**Porkie999** · Sep 21 '07, 04:36 PM

ok sorry to multipost but how would i add more names to the login list? sorry i normally dont use php

regards
george

**bergy** · Sep 21 '07, 05:50 PM

Try this:

[PHP]
<?php
$users = array("user1", "user2", "user3");
$pwrds = array("pw1", "pw2", "pw3");
$loginSuccessfu l = false;
for($i = 0; $i < count($users); $i++){
if($users[$i] == $_SERVER["PHP_AUTH_U SER"]){
if($pwrds[$i] == $_SERVER["PHP_AUTH_P W"]){
$loginSuccessfu l = true;
}
}
}
if($loginSucces sful){
//Login Successful!!
}else{
//Error Message!!
}
?>
[/PHP]

**Porkie999** · Sep 21 '07, 08:45 PM

hi erm that code i carnt get to work, i dont know why but it just dousnt show any boxes etc???

any help here?

or can i just modify code off the one that i did?

**bergy** · Sep 22 '07, 02:11 AM

Yes, I'm sorry for not being more specific. You're going to want to add the snippet I posted to your above code, you still need the following to make it work. [php]
header ("HTTP/1.0 401 Unauthorized");
header ("WWW-Authenticate: Basic realm =\"$areaname\"" );
die();[/php]
You just need to add in my snippet to have multiple logins.

php coding website password protect

php coding website password protect

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment