From: Boris Z. <bo...@2b...> - 2002-08-27 14:41:33
|
Hi Manjusha, Am Dienstag, 27. August 2002 16:09 schrieb Manjusha Luktuke: > Hi, > > Just wanted to know how to force a page to open with 'pkit_login' set to 1. > My problem is as follows - > suppose the user has logged in and wants to view a page that shows some > reports. > > To set 'pkit_login' =1 i have to call the page url as follows > http://MACHINE/reports_page?pkit_login=1 > > i can set this url as a link from where it is called > say in the main page i say - > <a href=http://MACHINE/reports_page?pkit_login=1> View you report here </a> > > This will call the pkit_auth_session and confirm that the user had logged > in and the session is valid. > But i can't stop the user from typing the same URL on the browser, > without 'pkit_login' set, like http://MACHINE/reports_page without > logging in. In which case the pkit_auth_session will not be called and the > user will still get a view of the reports page even if he is not logged in > ? there is no need to set pkit_login=1 anywhere outside your login form (if i get your problem right). To protect a page use require_login='yes'. > > I do not want to use "require_login" option as it would pop up the login > page irrespective of everything ? No, then something in your session setup is wrong. The login page is only called if the user is not logged in propperly. You can check how it should work on http://eg.2bz.de/. Create a useraccount for you at http://eg.2bz.de/newacct1?pkit_done=http://eg.2bz.de/ Call a restricted page: http://eg.2bz.de/restricted and you will see how it should work. The login page is only called if you are not logged in. Is this the desired behavior of your page? create a new account > > So how do i force a call to pkit_auth_session ? there is no need. > Am i missing something here ? > Yes, but just lets make sure i get the problem right. > Thanks, > Manjusha. -- Boris |