close ad
Install the LAtest Updates to Work with CC 2017 and CC 2018
open ad
View Menu

Technical Support Forums

Free, outstanding support from WebAssist and your colleagues

rating

Why is this page allowing access?

Thread began 11/12/2015 8:50 am by russell298997 | Last modified 11/12/2015 7:36 pm by Ray Borduin | 399 views | 3 replies |

russell298997

Why is this page allowing access?

Have set up a log in page to admin back end pages, which is based on useremail and user password. that works fine. the "home" page for the users is teamhome.php. this page uses the session value TeamID, to populate the right club info.

i added a Restrict Access To Page behaviour and set up a rule called login2016. my rules were session value useremail = recordset value "email" and session value password = recordset field "password".

But if i try and access teampage.php without logging in it grants me access. it doesnt populate and club info as there is no session value, but i want it top refer me to the login page. what am i doing wrong?

have zipped what i guess are appropriate pages. thanks guys

Attached Files
webassist.zip
Sign in to reply to this post

Ray BorduinWebAssist

You can't refer to recordset values directly in security rules. They will be out of scope... also if both the Session variable and Recordset value don't exist, they will match and access will be granted.

The solution is probably to just verify the TeamID session variable exists as the rule.

Sign in to reply to this post

russell298997

ok, i kinda get that. could you just confirm how i would write that rule, save me a bit of inevitable mucking around in the morning!!
thanks as ever Ray

Sign in to reply to this post

Ray BorduinWebAssist

Just use:

value: <?php echo($_SESSION['TeamID']); ?>
comparison: <>
compare to:

keep compare to blank and it will only allow access if the session variable TeamID has a value

Sign in to reply to this post

Build websites with a little help from your friends

Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.

Build websites from already-built web applications

These out-of-the-box solutions provide you proven, tested applications that can be up and running now.  Build a store, a gallery, or a web-based email solution.

Want your website pre-built and hosted?

Close Windowclose

Rate your experience or provide feedback on this page

Account or customer service questions?
Please user our contact form.

Need technical support?
Please visit support to ask a question

Content

rating

Layout

rating

Ease of use

rating

security code refresh image

We do not respond to comments submitted from this page directly, but we do read and analyze any feedback and will use it to help make your experience better in the future.

Close Windowclose

We were unable to retrieve the attached file

Close Windowclose

Attach and remove files

add attachmentAdd attachment
Close Windowclose

Enter the URL you would like to link to in your post

Close Windowclose

This is how you use right click RTF editing

Enable right click RTF editing option allows you to add html markup into your tutorial such as images, bulleted lists, files and more...

-- click to close --

Uploading file...