Hello everyone, I have a bit of code attached that is suppose to retrieve the login details of the user and query a database and return the user name amongest other things. However, what I found out is that everyone that logs in is being identified as Dave(me) rather then the various users. I thought this was a case that I have inserted some hard coded variables for testing or something like that but have reviewed all the code to find nothing of the sort.

The intent is to due away with the login screens and just have the website query the computer for the criteria to determine the user's setting.

Am I using this code correctly?

PHP Code:

$login_sso = getenv("username"); 


PHP Code:

<?php
// start session 
session_start();
// set up some global variables 
@include 'globalcfg.php';
@include 'db_connect.php';
@include 'function_library.php';
$login_sso = getenv("username");
//query for user
$sql= 'select staff_id, sso, first_name, alias, interface, interface_iso from tbl_staff where sso = "'.$login_sso.'"';
$result = query($sql);
//Confirms if a record was found that matches query
if (mysql_num_rows($result)) {
 //Determines if user has a name they prefer to be called
 $row = mysql_fetch_assoc($result);
 if ($row['alias']) $name=$row['alias'];  
 else    $name=$row['first_name'];
 $_SESSION['name'] = $name;
 $_SESSION['staff_id'] = $row['staff_id'];
}
$_SESSION['sso'] = $login_sso;
$_SESSION['interface'] = $row['interface'];
$_SESSION['interface_iso'] = $row['interface_iso'];
?>

getenv() will return an environment variable from the server session, not the browser's os session. Why not use a cookie, and just require the user to login once. Next time, read the cookie?

I am tired of all the **** logins that we deal with everyday. As an example, I log into 6 different items every morning just to do my job not to mention the business website every time I am directed to it for information, add another 10 times, I just wanted to get rid of that so that the experience of using the software was just that little bit easier. Users don't have to remember login named or passwords. I know, with a cookie, you do it once and not again until the cookies are cleaned from the computer and then you can't remember the login.

If I have to use a cookie I guess I will but I was trying to do this without. Is it possible to retrieve the users login details from their computer?

But thanks as well, since I at least know now why it is doing what it doing.

If you use $_REQUEST to retrieve the login parameters, you could simply create shortcuts to the login url, and pass in the parameters. However, this is not a very secure way of storing passwords.

$_REQUEST is just another way to access $_GET and $_POST.

Is it possible to retrieve the users login details from their computer?

Only from a cookie!

Originally Posted by GetGamesHere

Why not use a cookie, and just require the user to login once. Next time, read the cookie?

Righto.

---

dgkindy

Why not have the user log in once, then set the cookie for 16 years?

PHP Code:

time()+60*60*24*6004