header location url not working in ipage

Question

I have built a login page for the admin panel,after succesful login the page will redirect to the dashboard.php.When am running in localhost it is working fine,session also working.But when I uploaded in Ipage the page is not redirecting,it is simply reloading the login page. My session code is

    <?php
 session_start();
if(isset($_SESSION['user']) && isset($_SESSION['pass']))
{
header('Location: dashboard.php');
}
?>

The validation code and redirecting code

<?php
   //session_start();

    function login($username, $password)
{


    $query = "SELECT * FROM user WHERE username='$username' AND password='$password'";

   $result = mysql_query($query)or die(mysql_error());
   $num_row = mysql_num_rows($result);

   if( $num_row == 1 )
   {
     while( $row=mysql_fetch_array($result) )
     {
      return true;//$_SESSION['userid'] = $row['userid'];
     }
   } else {
      return false;
   }

  return true;
}
    include("connect.php");

if (isset($_REQUEST['login'])){
    $validLogin = login($_REQUEST['user'], $_REQUEST['pass']);

    if ($validLogin)
    {
        $_SESSION['user'] =$_REQUEST['user'];
        $_SESSION['pass'] = $_REQUEST['pass'];
        header("Location: dashboard.php");
        echo 'hi there';
     } else 
     {
        echo "<font color='white'><h1> Incorrect Details,Entry Prohibited :) </h1></font> ";
     }

}
  ?>

Your code is vulnerable to SQL injections; you should read on [how to prevent them in PHP](http://stackoverflow.com/q/60174/53114). — Gumbo, Mar 15 '14 at 08:31
Yep I got that, but is it actually true when it's on the server? You could try adding exit($validLogin) after calling login, just to mak sure. Otherwise, are you sure that the session is started on the dashboard page? If not, it might redirect you to the login page... — David, Mar 15 '14 at 09:46
ya it is true..I even removed sesssion from dashboard and login page it is still not redirecting to the other page — Vicks, Mar 15 '14 at 09:47
Well yes, if you remove the session, you'll stay on the login page — David, Mar 15 '14 at 10:00

score 2 · Answer 1 · answered Mar 15 '14 at 08:29

2

<?php
ob_start();
?>

at first of line

if ($validLogin)
{
    $_SESSION['user'] =$_REQUEST['user'];
    $_SESSION['pass'] = $_REQUEST['pass'];
    header("Location: dashboard.php");
    exit;
 } else 
 {
    echo "<font color='white'><h1> Incorrect Details,Entry Prohibited :) </h1></font> ";
 }

answered Mar 15 '14 at 08:29

Laukik Patel

733
7
18

where should i add that code..? after the session php tag or after my validation php tag..? – Vicks Mar 15 '14 at 08:46
I have added this code: error_reporting(E_ALL); ini_set("display_errors", 1); no error is showing – Vicks Mar 15 '14 at 08:59

score 1 · Answer 2 · answered Mar 15 '14 at 08:07

1

You can't do an echo after your header() . Uncomment it and add an exit as shown below.

if ($validLogin)
    {
        $_SESSION['user'] =$_REQUEST['user'];
        $_SESSION['pass'] = $_REQUEST['pass'];
        header("Location: dashboard.php");
        //echo 'hi there'; //<------ Commented this
        exit;// <---- Added exit 
     } else 
     {
        echo "<font color='white'><h1> Incorrect Details,Entry Prohibited :) </h1></font> ";
     }

answered Mar 15 '14 at 08:07

Shankar Narayana Damodaran

68,075
43
96
126

So it says..`Incorrect Details,Entry Prohibited` ?? Btw why have you commented `session_start();` . It should be on the top next to the ` – Shankar Narayana Damodaran Mar 15 '14 at 08:16
It is at the top of the same page,the session code that I have given,so no need of again initializing it..so i commented it. – Vicks Mar 15 '14 at 08:18
Seems like the session is not _being set_. Please [`enable the error reporting`](http://stackoverflow.com/a/6575502/1003917) on your code and check [`this`](http://stackoverflow.com/a/1978702/1003917) – Shankar Narayana Damodaran Mar 15 '14 at 08:28
I have written this error_reporting(E_ALL); ini_set("display_errors", 1); no error is showing – Vicks Mar 15 '14 at 08:39
Can you check if your session is really being set ? ` – Shankar Narayana Damodaran Mar 15 '14 at 09:18
I have removed session from this page and dashboard page and tried,it is still not redirecting. – Vicks Mar 15 '14 at 09:33

score 0 · Answer 3 · answered Mar 15 '14 at 08:24

0

Remove space after Location: and try following code

header("Location:dashboard.php");

answered Mar 15 '14 at 08:24

Ayaz Shah

435
1
5
24

OP mentioned that it already worked on his localhost. Maybe this is a session issue. – Shankar Narayana Damodaran Mar 15 '14 at 08:25

David · Answer 4 · 2014-03-15T10:10:49.287

Try using ob_clean

if ($validLogin)
{
    ob_clean();// <---- Added this
    $_SESSION['user'] =$_REQUEST['user'];
    $_SESSION['pass'] = $_REQUEST['pass'];
    header("Location: dashboard.php");
    //echo 'hi there'; //<------ Commented this
    exit;// <---- Added exit 
 } else 
 {
    echo "<font color='white'><h1> Incorrect Details,Entry Prohibited :) </h1></font> ";
 }

Edit: according to your comments on other posts, you disabled the session.. make sure it's enabled, both on login and dashboard page

header location url not working in ipage

4 Answers4