Click to See Complete Forum and Search --> : How do i prevent people from skipping my validation page?


Alassane
12-26-2006, 10:47 PM
Hi I am knew to sql so please dont be to harsh on me T.T.
The problem is I have a shoutbox you can visit if you want on this link http://playground.biringa.com/Mainpage.php (it suks but it is my pride :) ), to go to the ACP people need to enter a password on the page that i will call page A. When they enter the correct password they will be transferred to the ACP but if they in a way or an other find out what the URL of the ACP is well i am dead because instead of going trough page A people could just type the url and go directly to the ACP and do horrible stuff on my website :( . So if anyone knows a solution about this please post it.
Ps:if you didn't know ACP means administrator control panel wich is were admins of forums and such can edit,delete, ban people and more.

chazzy
12-26-2006, 11:32 PM
you could use sessions, and only when they enter the password correctly can they go forward. then add a little validation that looks to see if a certain variable in their session has been set. this variable should get set upon entering the correct password. if its not set, you could forward them to the log in page.

itbeings
12-30-2006, 08:08 PM
you could use sessions
Have you solved this prblem with session?

Alassane
12-31-2006, 12:33 PM
Yes i did now it is impossible to go through my shoutbox whithout first registrating and I would like to thank chazzy for that :).