Bill Cosby is my Father
Posts: 4
28 credits Members referred : 0
« Reply #2 on: Mar 10, 2009, 08:50:27 am »
Hi Olaf
Thank you for your fast reply. I know .htaccess if used for protection of entire dirs. However many people use .htaccess for scripts as it should be "more secure".
I think I will use both in my admin environment. .htaccess for the entire folder incl. doc, pics ect. and phpLoginClass for permission
About the logout, maybe you have an example that works?
Global Moderator Community Supporter?
Jedai Sword Master
Gender:
Posts: 6691
34714 credits Members referred : 374
It's time to use PHP5!
« Reply #3 on: Mar 10, 2009, 08:55:18 am »
Hi,
the script is not written by me (I have my own class)
.htaccess is different from session based authentication, protecting a directory its also protected against other linux user for example. Sessions are safe too, if the server is well protected.
Most servers doesn't support a database based user management for .htaccess based protection
I am a metal monkey!
Administrator Community Supporter?
Jedai Sword Master
Gender:
Posts: 5779
46271 credits Members referred : 3
« Reply #4 on: Mar 11, 2009, 09:30:36 am »
Hi groyk, I am the author of php user class so maybe I can help.
The only thing that is wrong about your code is the ../ which should be a url (this will be passed to header(location) ). Of course this have nothing to do with the reason that you are not logged off.
The problem has to do with your session settings. I haven't find yet what exactly causes this problem but I've seen this before. But in a production environment with a real domain always work fine.