有条件的重定向apache2

Question

I am setting up a webpage to host files for some users. Right now if you go to the directory blah/folder you will be presented with apaches default folder view. This folder view is ideal, however I would like to prevent people from going straight to the folders in the server directory.

Right now I have a login page which starts a session and if the users logs in correctly will direct them to their top directory and set a session variable.

I would like to have a way that whenever someone attempts to access a file or folder on my server, it checks for this variable and if it is not present it directs them back to the login page and if it is present shows them the default folder view.

I was thinking I could use .htaccess to redirect to a php file that checks the session status, but I don't know how I would keep this from running in a loop.

Answer 1

Let's say you have a members page that you want only to be accessed when a user is logged in and a login page that can be accessed by anyone.

You can use $_SESSION[ ] to do this

Create a header page that is included in both files and use session_start()

Login page should look something like this

 <?php
  require_once 'header.php';
  if(isset($_POST['user']&&$_POST['pass'])
  {
    //validate the values and check if user login credentials are right
   $_SESSION['loggedin']='true';
  }
 ?>

Members page should have something like this

<?php
 require_once 'header.php';
 if($_SESSION['loggedin']=='true')
 {
  echo'you can access this page member';
 }
 else{
 echo'Sending you back Mr';
 header('Location: http://somesite.com/login.php');
 }
?>