[perleo]

Hi, i have this script for user auth.

Q1. How can I make multipule passwords without using a db
A2. How can i protect pages so that they can only access it when they have logged in.

---------------------------------------------------

<?php
@ $name = $HTTP_POST_VARS['name'];
@ $password = $HTTP_POST_VARS['password'];
if(empty($name) ||empty($password))
{
?>
Pilots login here.

<form method="post" action="pilots/index.php">
Username
<input type="text" name="name" size="10">
Password
<input type="text" name="name" size="10">
<input type="submit" value="Log In">
</form>
<?php
}
else if($name=='@users'&&$password=='@passwords')
{
echo'You have sucessfully loged in';
}
else
{
echo'Sorry Username/Password is incorrect';
}
?>

[SleeperZ]

Without using a database you would be forced to use an array,

I would suggest an array within an array, so you in fact are using 3 arrays in total. 1 your main array, 2, your Username array 3, your corresponding Password array.

To make sure they login, requires the use of sessions. Session variables throughout your site can help ensure that the user logged in has access to whatever you designate him / her to look at.

I hope this helps, if you require consultation on this in any further depth please feel free to contact me.