Question

I have created a membership system and only signed in users can enter comments. But, without signing in, everyone can access every pages by typing the name of the PHP file in the link bar.How can i redirect non-registered users to the homepage?
Thanks

Answer 1

You have to create a session if a user has succesfully logged in:

session_start(); // best to put this at the top of the first php file that's called, preferably on every page
// check user credentials
if (!valid credentials) {
    header('Location: login.php');
    exit();
}

$_SESSION['user'] = 'username';

And in the php file where you want to check:

session_start(); // best to put this at the top of the first php file that's called, preferably on every page

if (!isset($_SESSION['user'])) {
    header('Location: login.php');
    exit();
}