Question

I was trying to make a one page script with the action set to server php self but when running the script even after I type in the right password I am given “You Must Supply a Password”. Am I doing this right. Please let me know my mistake

login.php

    <?php
        $pass = 'defense6';

        if(isset($_POST['submit'])){

            if(($_POST['password'] == $pass)) {    
                   $_SESSION['password'] = md5($_POST['password']);
                   header('Location: index.php');
            } else {
                echo 'Password Invalid';
            }

        }
        else {
            echo 'You must supply a password.'.$_SESSION['password'] ;
        }
        ?>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="POST">  
Password: &nbsp;<input name="password" type="password" /><br/><br/>
:
<input type="submit" name="submit" value="Login" style="float:right;" />

<br/>
  <p></p>
</form>

index.php

<?php
$pass = 'defense6';
 if($_SESSION['password'] == md5($pass)) {}
else {header('Location: login.php');}
?>

Answer 1

You need to add seesion_start() on every page you use session.

session_start() creates a session or resumes the current one based on a session identifier passed via a GET or POST request, or passed via a cookie.