close ad
 
Important WebAssist Announcement
open ad
View Menu

Technical Support Forums

Free, outstanding support from WebAssist and your colleagues

rating

Access secure pages after loggin

Thread began 6/05/2013 6:57 am by Hitaroo | Last modified 6/05/2013 11:44 am by Jason Byrnes | 1614 views | 9 replies |

Hitaroo

Access secure pages after loggin

Hi I have created a login page, with
e-mail
password
remember my details
auto log in

I have created a secure log in successful page using SecurityAssist, which works fine - it prevents the page being accessed directly. the user has to be logged in successful to the users table before access is granted, if access is denied (user is not logged in to the users table) it will take them to the log in page and they have log in to have access.

The problem I am facing is that even after the user has logged in with the correct e-mail and password access is denied to the log in page and the user is taken back to the log in page (index.php) with the following in the address bar:

http://www.hackneyhydroponics.co.uk/demo/index.php?accesscheck=%2Fdemo%2Flog-in-successful.php%3F

What am I missing? I have been through the post in the forum but can not find a solution.

After adding the secure page function using SecurityAssist the following code was added to the page:

<?php require_once( "../webassist/security_assist/helper_php.php" ); ?>
<?php
if (!WA_Auth_RulePasses("Logged in to users")){
WA_Auth_RestrictAccess("index.php");
}
?>

I have also tried this using the Mange Site Access > Site Access Manager

Sign in to reply to this post

Jason ByrnesWebAssist

most likely the server is not configured to sessions correctly.

use the attached session test file to ensure that the server can save sessions.

if the test fails, you will need to contact the host to have them fix the problem, it is probably the session.save_path setting in the php.ini file.

Attached Files
sessionTest.php.zip
Sign in to reply to this post

Hitaroo

Hi I have uploaded and tested the sessionTest.php file.

When I click the first link the URL changes to the following:
http://www.hackneyhydroponics.co.uk/demo/sessionTest.php?test=test

When I click the second link the URL reads:
http://www.hackneyhydroponics.co.uk/demo/sessionTest.php

I think the sessions are working as I have set a session on the log in page to capture the username from the DB after log in and display it on the log successful page, and that works fine.

Thanks for your help.

Sign in to reply to this post

Jason ByrnesWebAssist

I'll need to troubleshoot directly, see the private message section.

Sign in to reply to this post

Hitaroo

Originally Said By: Jason Byrnes
  I'll need to troubleshoot directly, see the private message section.  
Sign in to reply to this post

Jason ByrnesWebAssist

Originally Said By: Hitaroo
    
Sign in to reply to this post

Hitaroo

Originally Said By: Jason Byrnes
    
Sign in to reply to this post

Jason ByrnesWebAssist

in the Logged into user rule, it was set to use the session:
SecurityAssist_userID

the login page was creating the session as:
SecurityAssist_UserID

(Upper case U).

I updated the rule to use the upper case U in the session name.

Sign in to reply to this post

Hitaroo

Originally Said By: Jason Byrnes
  in the Logged into user rule, it was set to use the session:
SecurityAssist_userID

the login page was creating the session as:
SecurityAssist_UserID

(Upper case U).

I updated the rule to use the upper case U in the session name.  
Sign in to reply to this post

Jason ByrnesWebAssist

i changed webassist/security_assist/helpergrouprules.php


use the security assist show region behavior to show a logged in message.

Sign in to reply to this post
loading

Build websites with a little help from your friends

Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.

Build websites from already-built web applications

These out-of-the-box solutions provide you proven, tested applications that can be up and running now.  Build a store, a gallery, or a web-based email solution.

Want your website pre-built and hosted?

Close Windowclose

Rate your experience or provide feedback on this page

Account or customer service questions?
Please user our contact form.

Need technical support?
Please visit support to ask a question

Content

rating

Layout

rating

Ease of use

rating

security code refresh image

We do not respond to comments submitted from this page directly, but we do read and analyze any feedback and will use it to help make your experience better in the future.

Close Windowclose

We were unable to retrieve the attached file

Close Windowclose

Attach and remove files

add attachmentAdd attachment
Close Windowclose

Enter the URL you would like to link to in your post

Close Windowclose

This is how you use right click RTF editing

Enable right click RTF editing option allows you to add html markup into your tutorial such as images, bulleted lists, files and more...

-- click to close --

Uploading file...