PHP Authentication & Internet Explorer

Question

I am using DW8.02 and PHP 5.0 to develop my website. My
service provider is using a Linux box and Apache. My PHP login
webpages work fine using Firefox, Opera, and Netscape but I get my
'access not allowed' webpage when using Internet Explorer 6.0 and
7.0. I am using Dreamweaver 8.02's built-in 'Authentication Server
Behavior' to create the log in page and to add a 'Restrict Access
to Page' PHP script to the restricted webpages. Here is my code:
Log in User:
<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType,
$theDefinedValue = "", $theNotDefinedValue = "")
$theValue = get_magic_quotes_gpc() ? stripslashes($theValue)
: $theValue;
$theValue = function_exists("mysql_real_escape_string") ?
mysql_real_escape_string($theValue) :
mysql_escape_string($theValue);
switch ($theType) {
case "text":
$theValue = ($theValue != "") ? "'" . $theValue . "'" :
"NULL";
break;
case "long":
case "int":
$theValue = ($theValue != "") ? intval($theValue) : "NULL";
break;
case "double":
$theValue = ($theValue != "") ? "'" . doubleval($theValue) .
"'" : "NULL";
break;
case "date":
$theValue = ($theValue != "") ? "'" . $theValue . "'" :
"NULL";
break;
case "defined":
$theValue = ($theValue != "") ? $theDefinedValue :
$theNotDefinedValue;
break;
return $theValue;
?>
<?php
// *** Validate request to login to this site.
if (!isset($_SESSION)) {
session_start();
$loginFormAction = $_SERVER['PHP_SELF'];
if (isset($_GET['accesscheck'])) {
$_SESSION['PrevUrl'] = $_GET['accesscheck'];
if (isset($_POST['Username'])) {
$loginUsername=$_POST['Username'];
$password=$_POST['Password'];
$MM_fldUserAuthorization = "Status";
$MM_redirectLoginSuccess = "comm_t4tadmin_edit.php";
$MM_redirectLoginFailed = "access_error.html";
$MM_redirecttoReferrer = false;
mysql_select_db($database_leathernecks, $leathernecks);
$LoginRS__query=sprintf("SELECT Username, Password, Status
FROM tblaccess WHERE Username=%s AND Password=%s",
GetSQLValueString($loginUsername, "text"),
GetSQLValueString($password, "text"));
$LoginRS = mysql_query($LoginRS__query, $leathernecks) or
die(mysql_error());
$loginFoundUser = mysql_num_rows($LoginRS);
if ($loginFoundUser) {
$loginStrGroup = mysql_result($LoginRS,0,'Status');
//declare two session variables and assign them
$_SESSION['MM_Username'] = $loginUsername;
$_SESSION['MM_UserGroup'] = $loginStrGroup;
if (isset($_SESSION['PrevUrl']) && false) {
$MM_redirectLoginSuccess = $_SESSION['PrevUrl'];
header("Location: " . $MM_redirectLoginSuccess );
else {
header("Location: ". $MM_redirectLoginFailed );
?>
Restrict Access:
<?php
if (!isset($_SESSION)) {
session_start();
$MM_authorizedUsers = "edit";
$MM_donotCheckaccess = "false";
// *** Restrict Access To Page: Grant or deny access to this
page
function isAuthorized($strUsers, $strGroups, $UserName,
$UserGroup) {
// For security, start by assuming the visitor is NOT
authorized.
$isValid = False;
// When a visitor has logged into this site, the Session
variable MM_Username set equal to their username.
// Therefore, we know that a user is NOT logged in if that
Session variable is blank.
if (!empty($UserName)) {
// Besides being logged in, you may restrict access to only
certain users based on an ID established when they
login.
// Parse the strings into arrays.
$arrUsers = Explode(",", $strUsers);
$arrGroups = Explode(",", $strGroups);
if (in_array($UserName, $arrUsers)) {
$isValid = true;
// Or, you may restrict access to only certain users based
on their username.
if (in_array($UserGroup, $arrGroups)) {
$isValid = true;
if (($strUsers == "") && false) {
$isValid = true;
return $isValid;
?>
Does anyone have any ideas why this is not working in only
Internet Explorer? Any suggestions or help to resolve this is
greatly appreciated.

Answer 1

holymackeral wrote:
> Another curious note... whether or not "Allow Cookies"
is tuned on in IE 7.0,
> localhost (running WindowsXP/IIS5.1) correctly processes
the logons and
> displays the restricted webpages locally. However with
"Allow Cookies" turned
> on, IE 7.0 still will not open restricted webpages on
the remote host site
> (running Linux/Apache).
>
> Does this narrow or broaden the issue? Help??
No idea, sorry. :(
David Powers
Adobe Community Expert
Author, "Foundation PHP for Dreamweaver 8" (friends of ED)
http://foundationphp.com/