php file that runs and then directs to another file

Question

I am trying to create a home page. Once the user comes to the site and inputs username and password the data will get posted to a checklogin.php file where it will verify the data the user entered. Is there a way that after it checks the data and it is all good then it redirects the user to another page that is the home page? I want to do this so that my entire checklogin script is not on the home page. then also if the user is in a different part of the site, and they click home, the check login script will run again and it will fail. I understand i can use session variables to see if they have already logged in and then somehow bypass the checklogin script on the home page if they have already logged in, but is this the correct way to do this?

<?php
include'vive_fns.php';

 $v_username = trim($_POST['viveuser']);
 $v_password = trim($_POST['vivepass']);

 if(!isset($_POST['viveuser'])|| empty($v_username)){
     echo"Please enter a username"; //should change to redirect
     die();
 }

 elseif(!isset ($v_username) || empty($v_username)) {
     echo "Please enter a password"; //should change to redirect
     die();
 }

//if all data is entered we want to check the password
     $mysqli = connect_db();

//set database query     
     $sql1 = "SELECT password FROM vive_user WHERE username = "."'$v_username'";

 //check to make sure a result is returned    
if(!$result1 = $mysqli->query($sql1)){
    echo 'Could not query database. Please try again later.';//should change to redirect
    die();
    }

    else {
     $data = $result1->fetch_array(MYSQLI_NUM);
     $db_pass = $data[0];
    }


   if($db_pass !== $v_password){
       $title = 'Incorrect Login Info';
       //do_html_header($title); this sets the page title
       echo"Incorrect Password";//should change to redirect
       die();
   }

//if everything checks out need to establish user info
       $title = 'Home';
       do_html_header($title);


       //echo"Logged In";
       session_start();
       $_SESSION['valid_user']=$v_username;

// at this point i want to redirect
       header("Location: home.php");
       exit();

Answer 1

header("Location:http://localhost/form2.php");
exit();

Just change the url as you want.

Answer 2

check this out i think it would help you to under stand the logic here is first login page where user can put login info

 <form action="reg_auth.php" method="post" accept-charset="utf-8">
        <div id="inrlog" style="display:none;">
        <div class="form-group required">
         <label for="UserFirstname">Email</label>
            <input name="firstname" class="form-control" maxlength="255" type="text" id="UserFirstname" required="required"/>
        </div>
        <div class="form-group required">
         <label for="UserLastname">Password</label>
            <input name="lastname" class="form-control" maxlength="255" type="password" id="UserLastname" required="required"/>
        </div>
        </div>
            
   </div>
    <div class="modal-footer">           
            <p style="text-align:left;"></p><div class="submit"><input  class="btn btn-primary" title="Login" name="login" type="submit" value="Login"/></div><div style="display:none;"></div></form>

here is authenticate page code where user info get authenticate

<?php
 if($_POST['login']){
  $email = $_POST['email']; 
  $pwd   = $_POST['pwd'];

  $m = mysql_fetch_assoc(mysql_query("select * from `register` where `email`='$email' and `pwd`='$pwd'"));
  if(!empty($m['email'])){

   if($m['status'] == 1){
    $_SESSION['login']     = $m['id'];
    $_SESSION['displayaname'] = $m['fname'].' '.$m['lname'];
    header("Location: myaccount.php");
   }else{
    header("Location: reg_auth.php?msg=4");
   }
   exit();
  }else{
   unset($_SESSION['login']);
   unset($_SESSION['displayaname']);

   header("Location: reg_auth.php?msg=3");
   exit();
  }
 } 
 
    if($_GET['msg'] == 2){
  $msg = "Email Already Exists! Please Try Some Different Email."; 
 }
 if($_GET['msg'] == 3){
  $msg = "Invalid Username or Password! Please Try Again.";
 }
?>

Answer 3

Yes,

You need to use Session to store the information related to user once the user is successfully authenticated with the username and password field.

• once the user is authenticated you can redirect to successful page, i mean allow them to access pages.
• if user is not authenticated redirect them to login page again.
• if session is expire redirect them to login page again.

Thanks Amit

Answer 4

Yes this sounds correct. So you'll have a script on your homepage with login&passw, posting infos to your checklogin.php.

There, you check if datas are correct, if they are correct you use sessions to set him as logged in. After, you redirect him on to homepage with header() function.

Note that header() function will not work if set after html content but in your case, no html in checklogin.php right ? ;)