Redirect Problem when Authenticating

I have an issue where I set up authentication and a redirect page if the authentication is successful - but when a valid username and password are entered - instead of redirecting to the new page - it appends the current url with "?accesscheck=%2F" and then the correct redirect page.

So, it looks like this:

http://www.mysite.com/loginpage.php?accesscheck=%2Fredirctpage.php

Any thoughts on what is causing this error? Something is not letting it redirect properly.

Thanks

%2F is the encoded value for a slash. It should not cause problems... it sends the page as an root relative link including the slash so that it can properly redirect from subdirectories.

Ray,

I get that but I can't figure out why it is not redirecting properly and instead it is appending the redirect with that stuff to the current login url rather than allowing to redirect.

After you login, what page does it take you to? Did you select the option to return to previous page if specified?

Ray,

I think there is actually an issue with the access rule manager. I just decided to strip out the restrict rules access on the redirect page and everything redirects correctly now... so I need see why the session variable is not setting correctly or pulling from the database.

I've looked everywhere on how to setup the redirect part. I have the login working and the validation working. However, the only way I have found to redirect after the correct login is authenticated, is to put the url of the page I want them to be directed to, into the form action. And that can't be right.

Now, I know that the Wizard will build this for me. But this is for an Admin page like that created in the User Registration solution where it authenticates from the globals.php page.
So instead of the Security Assist show region saying "your logged in", I wanted it to just redirect.

Thanks,
Troy

You can create a rule for when you want to redirect, then apply the security assist page level security on the current redirect page using that rule and specify the page you want to redirect to.

Thanks Ray.
I was trying to go that route, but I am confused on the rules. If I create a rule under "Grant Access if:", that says if the session login matches the globals.php where the login is stored, then the only option I see is "If access denied, go to:".
I don't see any place that says "If access successful, go to:" like it does in the Wizard.

Do I create a rule using a double negative? Such as if a rule is NOT "Rule", then "If access denied, go to:" newpage.php?

I know that didn't make sense, but maybe you will understand where I going with it.

Thanks,
Troy

Any rule includes the "not" rule for the inverse. When you apply the page protection server behavior any rules are listed with their opposite.

Ray,

I have tried doing this several ways. While using the "NOT Administrator" rule, I get an error from my Fire Fox browser saying "Redirect Loop Error".
So I created a new rule called "Redirect" and set it to compare the "AdminLogin" session to the globals.php info, but this time I used "<>". And then applied the "Redirect" rule to redirect to the new page if the admin login equals the session. In other words, the rule is that the admin username should not equal the session "AdminLogin". If it does, redirect to the newpage.php.

This works after I login but only if I refresh the page. So how do I trigger this rule to apply after a login and not on the page loading?

Here is my rules code from the HelperGroupsRulesPHP.php file.
<?php

function WA_Auth_GetComparisonsForRule($ruleName){
$comparisons = array();

switch ($ruleName){
case "Administrator":
$comparisons[0] = array(TRUE, "".((isset($_SESSION['AdminLogin']))?$_SESSION['AdminLogin']:"") ."", 1, "".$GLOBALS['WAGLOBAL_Admin_Password'] ."");
break;
case "Redirect":
$comparisons[0] = array(TRUE, "".((isset($_SESSION['AdminLogin']))?$_SESSION['AdminLogin']:"") ."", 2, "".$GLOBALS['WAGLOBAL_Admin_Password'] ."");
break;
}
return $comparisons;
}


function WA_Auth_GetGroup($groupName){
$group = Array();

switch ($groupName){
}
return $group;
}

?>


A little more information here: This is a login page that compares the login to the globals.php page. Not a database. I copied lines 3-13 from a users_login.php page generated by the Security Assist wizard as per instructions from support on an earlier issue. So I am not sure if there may be a conflict now. Here is that part of the code, for easy reference.

<?php
if (!session_id()) session_start();
if((((isset($_POST["userName"]) && $_POST["userName"]==$WAGLOBAL_Admin_UserName)?$_POST["userName"]:"") != "")) {
$_SESSION["AdminLogin"] = "".((isset($_POST["Password"]))?$_POST["Password"]:"") ."";
}
?>
<?php
if((((isset($_POST["userName"]) && $_POST["userName"]==$WAGLOBAL_Admin_UserName)?$_POST["userName"]:"") != "")) {
header("location : index.php");
}
?>

Thanks,
Troy