Hey,

I'm looking for how to make a script that when a user logs into a page, it displays content that is embedded in the page that normally could not be seen unless logged in. However, when the user logs in no one else should be able to see the embedded content or be able to login with that user's password and username.

Cookies don't work very well

Any help, thanks!

PHP if's and includes.

PHP Code:

if(/* User logged in */){
inclde "logged_in.php";
} else { // not logged in
inclde "not_logged_in.php";
} 


How do I get that to work with a session?

well, i use a session variable...like $_SESSION['logged'] , also with an 'if' ... like so:

PHP Code:

if ($_SESSION['logged'] == TRUE) 
 {
 
         //content for a logged user

  } 
     else {

      //content for a unlogged user
  
  } 


p.s. always place a session_start() at the beginning of your pages.

I would do it that way, but that way also happens to iframe resistant. Unless I've made an error in how I set the $_SESSION[''] up.

Website A = Editor
Website B = Being Edited

User Logs into Website A. Upon logging in Website B is brought up in an iframe. From there, I'm trying to get Website B to recognize that its in edit mode and bring up the embedded code that allows the edit. I can get it to work however I can't isolate it simply for the user that is logged in.

Sessions and cookies are not supported across multiple domains and websites. The only I can think of solving this issue is to use a "behind-the-scenes" method to request the logged in status of the previous site.

I-Frame tag from Website A:

PHP Code:

<iframe name="name" src="http://www.website-b.com/index.php?<?php echo 'session_name=' . session_name() . '&' . session_name() . '=' . session_id(); ?>"></iframe>

The index.php page in the I-Frame from Website B:

PHP Code:

<?php
  
  $user_logged_in = false;
  if (isset($_GET['session_name']) AND isset($_GET[$_GET['session_name']]))
  {
    $handle = @fopen('http://www.website-a.com/check_login.php?' . $_GET['session_name'] . '=' . $_GET[$_GET['session_name']], 'r');
    if ($handle && (int)@fread($handle, 1024)) $user_logged_in = true;
  }
  
?>

The check_login.php page located in Website A:

PHP Code:

<?php
  
  session_start();
  
  echo ($_SESSION['logged_in']) ? '1' : '0';
  
?>