Latest Contributions by RaymondGoins

We don't use a windows domain here but after some reading it seems the best solution is to use ldap. PHP requires you just un-comment the ldap.dll in php.ini and ldap is on by default in active directory. That being said I would put my functions in a separate file so that they may be used throughout your application. functions.php [PHP] function login_check() {   if (isset($_SESSION['IWP_loggedIn']) && $_SESSION['IWP_loggedIn'] === true && isset($_SESSION["IWPUser"])) {     return true;   } else {    return false;   } } function do_login($username, $password, $redirect) {   $un = $username; // This may need to change. you may have to append the domain ie. mydomain\username   $pw = $password;   if(empty($un)) {     header("Location: http://example.com/login.php?error=Username cannot be blank");     exit();   }   if(empty($pw)) {     header("Location: http://example.com/login.php?error=Username cannot be blank");     exit();   }   $server = "ldaps://yourservernamehere"; //IP or name of server here   //echo $server;   if (!($ldap = ldap_connect($server))) {     header("Location: http://example.com/login.php?error=Could Not Connect To Server"); // can change these error messages     exit();   }   if (!ldap_set_option($ldap, LDAP_OPT_PROTOCOL_VERSION, 3)) {     header("Location: http://example.com/login.php?error=Could Not Connect To Server");     exit();   }   if (!($res = @ldap_bind($ldap, $un, $pw))) {     header("Location: http://example.com/login.php?error=Could Not Connect To Server");     exit();   } else {     $_SESSION['IWP_loggedIn'] = true;     $_SESSION["IWPUser"] = $username;     header("Location: ".$redirect);   } } function do_logout($redirect) {   session_destroy();   header("Location: ".$redirect); }[/PHP] now you can require this file at the top of all your pages so that the functions can be used. login.php [HTML]<?php   $error = isset($_GET['error']) ? $_GET['error'] : ""; ?> <style type="text/css"> /* Login Form style  */ #loginform {   font-size: 14px;   text-align: center;   width: 480px;   position: fixed;   /*display: none;*/   background-color: #EEEEEE;   border-radius: 13px;   border: 2px solid #3399CC;   top: 40%;   left: 36%;   z-index: 200;   box-shadow: 10px 10px 10px black; } #loginform .form_header {   border-top-left-radius: 10px;   border-top-right-radius: 10px;   border-bottom: none;   width: 480px;   height: 30px;   line-height: 19px;   vertical-align: middle;   background-color: #3399CC;   text-decoration: none;   font-family: Times New Roman, Serif;   font-weight: 900;   font-size:  18px;   text-align: left;   padding-top: 5px;   color:   #FFFFFF;   cursor:  default; } #loginform .form_body {   width: 400px;   border: 1px solid black;   background-color: #FFFFFF; } #loginform .status {   width: 400px;   margin: 10px auto 0 auto; } #loginform input {   margin: 5px;   padding: 0px;   float: left;   border: 1px solid #cdcdcd;   background-color: white;   border-radius: 2px; } /* 'Login' Button */ #submit {   margin: 5px;   padding: 0px;   float: left;   width: 50px;   background-color: white; } </style> <div id="loginform" style="" >   <div class="form_header" id="popup_drag" >     <span style="margin-left:5px;">Employee Login</span>   </div>   <div class="status">     <fieldset>     <legend align="center">Authentication</legend>     <form id="login" name="login" method="post" action="/do_login.php" >       <input type="hidden" name="redirect" value="/gis"/>       <table align="center" width="300" border="0">       <tr>         <td width="80">Username</td>         <td><input id="name" type="text" name="username"></td>       </tr>       <tr>         <td>Password</td>         <td><input type="password" name="password"></td>       </tr>       <tr>         <td> </td>         <td><input id="submit" class="login-submit" type="submit" name="submit" value="Login"></td>       </tr>       </table>     </form>     </fieldset>   </div><br><span style="color:red;"><?php echo $error;?></span> </div>[/HTML] do_login.php [PHP] session_start(); require('functions.php'); // Process login $postdata = $_POST; do_login($postdata['username'], $postadat['password'], $postdata['redirect']);[/PHP] Very simple. You can add in some messages if you like. Then at the top of all your pages just run a login check [PHP]session_start(); require('functions.php'); if(login_check() === false) {   header("Location: http://example.com/login.php");   exit(); } else { // rest of your page below } [/PHP] I have not tested every part of this but once you implement it you can post any errors here and I will help out best I can. Don't forget to start all your pages with session_start(); just incase I forgot to add it to any of the pages. Also remember to change all your header locations. Hope that gets you going. Ray ... View more