Hi Guys,

Currently when my users login it will output an error if they dont exist.

However now i want my script to run a second mysql query of they dont exist in the first query.

if they exist in the second query i want to place some vars in a session ( up to this point im fine )

Now i want the script to goto a different page..

How do i do the gogot a diff page...

Example, pseudo code ( if thats the right name for it )

PHP Code:


$username =  from post;
$pass = from post;

// do password encryption etc..

select id from table where username = username and pass = pass;

if (it didnt return a row above) {

select from another table where ..................... ;

if ( did return a row ) {
redirect user to blaa.html ;

} 


Well depending on the system you're designing you don't need to redirect them to a new page at all.

PHP Code:

$username =  from post;
$pass = from post;

// do password encryption etc..
//check your input by running $username and $pass through mysqli_real_escape_string
//you may also want to use a regex to strip all non alphanumeric characters from your username 

$username = preg_replace("/[^a-zA-Z0-9 -]/", "", $_POST['username']);
//you won't want to use the same for the password since you're probably allowing some symbols in the password but the regex can be changed to allow other characters if you play with it a bit
select id from table where username = username and pass = pass;

if (it didnt return a row above) {

select from another table where ..................... ;
//you're wanting to insert some stats into a log here? 

if ( did return a row ) {
either print content of the new page or include content of new page, no need to redirect to another php file ;
otherwise the best way to point to a new page is in your html's form action destination 
} 


Ahhh yeah..
I suppose i could split the page into a few includes and only include parts of the page thats needed.

( I strip_tags , mysql_escape and do a bunch of other things to check they aint sending dodgy stuff my way )

TY

-G

You can use

header('Location: your.link.com');