authentication help

[kurgan]

I have made my first php script  

its a calendar
http://home.kurgan.dk/kurgan/kurganscalendar/

The next thing I'll add is events, but I'd like to make the system check if the user is allowed to edit the eventtable,  so some sort of authentication against the yabb password membergroups would be ideal..

Any help is appreciated

[Shoeb Omar]

well done - an integration with yabb would be awesome!

[kurgan]

thanks, actually it was far easier than I anticipated, the calendar system as it stands right now, has taken about 4-6 hours to do from scratch, even though Ive only been hacking around in other peoples php files before that..

its split up in 4 files (index.php that makes the main layout, and a simplecalender.api that draws the small calendars, and a fullcalendar.api that draws the big one, finally a colordeclaration.api for colorsettings, but I guess that should be in a per user database?) all in all just about 150 lines including comments

[kurgan]

btw. Alyson Hannigan is a fox!!

[Shoeb Omar]

i have good taste

[kurgan]

 

LOL... well you liked my first php script, so who am I to disagree?  

[kurgan]

still Id love some info on how to handle authentication...

[Shoeb Omar]

heh - sorry i cant help ya there.. im a modder for perl version.. php and sql are new to me  

[David]

still Id love some info on how to handle authentication...

Code Select Expand

if ($user != "") {
$user_sql ="SELECT memberName, passwd FROM yabbse_members WHERE memberName = '$user'";
$sql_result = mysql_query($user_sql,$connection) or die ("Couldn't execute user query.");
$row = mysql_fetch_array($sql_result);
if ($row["passwd"] == crypt($password,substr($password,0,2))) {
          do your crap
}
}
Ok, $user is the username entered from the form, $password is the plaintext password the entered.  It works with 1.1.0 and Jeff said passwords may have been changed for 1.3.0 but I am not sure.  Sorry for my lousey indentation, and speling, but web forms don't like the tab key.  

[kurgan]

ok thanks!!!

really nice..

how about checking which memebergroup the current user is part of?

[David]

Then add that into the sql query.  That is a very basic thinig that authenticates a user.  I was using it on part of my site, I actually simplified it for here but you can customize it however you wish.

[kurgan]

Ohh you're the evil dog!!!


that must be why you are being so breif )

[David]

What more do you want?  If you want the membergroup pull up the members table, see what field membergroup is stored in, and then add that field to the sql query.

[kurgan]

ok ok as long as you dont turn me into dogfood!!! )

[Bloke]

David reckon u could help me with ur 1337 php coding skills? I just want a simple login sciprt ot protect 1 page. So just want it to ask them to log in then look at their membergroup and maybe cookies if possible.