我在登录脚本中创建会话时遇到问题.Session()似乎不起作用,因为我可以通过在浏览器中输入来直接访问admin.php,当我登录时,我可以访问其他成员的信息,这是不应该发生的.这是我的登录脚本:
include('content/config.php');
// table name
$tbl_name=tablename;
// username and password sent from form
$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);
$sql="SELECT * FROM $tbl_name WHERE login='$myusername' and password='$mypassword'";
$result=mysql_query($sql);
$count=mysql_num_rows($result);
if($count==1){
$_SESSION["valid_user"] = $_POST["myusername"];
header("location: admin.php?name=$myusername");
}
else {
echo "Wrong Username or Password";
}
} else {
$myusername = "";
$mypassword = "";
}
?>
<html>
<head>
</head>
<body>
<table width="300" border="0" align="center">
<tr><td>
<form name="form1" method="post" action="login.php">
<table width="100%" border="0" cellpadding="3" …