Question

I have this code that makes sure your are logged in, and then making sure you are on the right page by checking a cookie set at login. This code works on a page in a directory underneath the login in script, however in a page in a directory below that it always takes you to accessdenied. Any ideas?

<?php

session_start();

if(!isset($_SESSION['SESS_MEMBER_ID']) || (trim($_SESSION['SESS_MEMBER_ID']) == '')) {
    header("location: http://mywebsite.com/member/accessdenied.html");
    exit();
}


 $_COOKIE["verify"] = $verify;
 if( $verify != file_get_contents("name.txt")) { 
  header("location: http://mywebsite.com/member/accessdenied.html");
 } else {  }

 ?>

And it seems like just the bottom part, the part that checks the cookie, isn’t working. Again, any ideas?

Answer 1

I think you have your cookie assignment backwards:

$_COOKIE["verify"] = $verify;

Should be

$verify = $_COOKIE["verify"];

And that should be:

$verify = isset($_COOKIE["verify"])?$_COOKIE["verify"]:false;

As if the cookie was not previously set, well it would give a notice error.