Help about Php

[Dr_BIoLoGY]

I'm making a website script for the Garment. So I already added login page and it is working perfectly. But the problem is anyone can just type any .php page name and can access those pages. I need to avoid that problem. So i need to know how to add session expiration for those pages. It will avoid my problem. If anyone need to access my website, they have to login through login page. Because session will blocking for the unauthorized access. Pleases anyone can give some advice to avoid my problem.

[kevk3v]

Add to the top of exery page

session_start(); 

put this where login is successful

$_SESSION["user"] = "username"; ///<-can be any values 

Add this to the pages that you want to protect

if(isset($_SESSION["user"]))
{
///logged in
}
else
{
////not logged in
} 

to log out users

session_destroy(); 

[Dr_BIoLoGY]

Add to the top of exery page

session_start(); 

put this where login is successful

$_SESSION["user"] = "username"; ///<-can be any values 

Add this to the pages that you want to protect

if(isset($_SESSION["user"]))
{
///logged in
}
else
{
////not logged in
} 

to log out users

session_destroy(); 

Thank You Friend. But i already added cookies for my website.

[arnage]

If its sql based use something like this:

function users() { 
 $username = !empty($_SESSION['username']) ? safe_query_function($_SESSION['username']) : null; 
 $password = !empty($_SESSION['password']) ? safe_query_function($_SESSION['password']) : null; 
 if (isset($username, $password)) { 
  $query = mysql_query('SELECT * FROM `users` WHERE `username` = "'.$username.'" AND `password` = "'.$password.'" LIMIT 1'); 
  return (bool) (mysql_num_rows($query) > 0); 
 } else { 
  return false; 
 } 
} 
if (users()) { 
// in the bussines 
} 

See also: http://coding-talk.com/f60/protectin...514/#post98932

And post the codes in the matter, its so much easier to help ppl.