MySQL + PHP - panel logowania, problem z panelem logowani do CRM Opcje

[bolorider]

Witam,

w skrócie: mamy plik index.html, ajax_login.php, secure.php oraz plik CRMmainPages.php.

Problem polega na tym, że do tej pory do CRMa można było się dostać poprzez panel logowania przeglądarki internetowej, czyli był folder zabezpieczony hasłem i tak odbywało się logowanie. Jednak teraz chciałem zrobić aby logowanie odbywał się przez panel logowania.

index.html uruchamia panel logowania - wpisujemy login/hasło i jeśli jest okej to przechodzimy do strony secure.php, plik ajac_login.php (nawiązanie połączenia z bazą MySQL)

i problem mam z tym jak przerobić plik secure.php aby uruchamiał się po zalogowaniu panel CRM (plik CRMmainPages.php) ?


ajax_login.php

[PHP] pobierz, plaintext 
<?php session_start();
//  Developed by Roshan Bhattarai 
//  Visit <a href="http://roshanbh.com.np" target="_blank">http://roshanbh.com.np</a> for this script and more.
//  This notice MUST stay intact for legal use
 
//Connect to database from here
$link = mysql_connect('sql.ac.nazwa.pl', 'ac_2', 'ac_haslo'); 
if (!$link) {
    die('Could not connect: ' . mysql_error());
}
//select the database | Change the name of database from here
mysql_select_db('ac_2') or die("blad!!"); 
 
//get the posted values
$user_name=htmlspecialchars($_POST['loginCRM_db_data_users'],ENT_QUOTES);
$pass=$_POST['passwordCRM_db_data_users'];
 
// zabezpieczenie MySQL injection
$user_name = stripslashes($user_name);
$pass = stripslashes($pass);
$user_name = mysql_real_escape_string($user_name);
$pass = mysql_real_escape_string($pass);
 
//$sql_select_user = mysql_query("select *from CRM_db_data_users where loginCRM_db_data_users = '$user_zalogowany' and passwordCRM_db_data_users = '$haslo_user' and flagaCRM_db_data_users = '1'");
 
//now validating the username and password
$sql="SELECT *FROM CRM_db_data_users WHERE loginCRM_db_data_users='".$user_name."' and flagaCRM_db_data_users = '1'";
 
 
//"select *from CRM_db_data_users where loginCRM_db_data_users = '".$user_name"' and flagaCRM_db_data_users = '1'";
$result=mysql_query($sql);
$row=mysql_fetch_array($result);
 
//if username exists
if(mysql_num_rows($result)>0)
{
	//compare the password
	if(strcmp($row['passwordCRM_db_data_users'],$pass)==0)
	{
		echo "yes";
		//now set the session from here if needed
		$_SESSION['u_name']=$user_name; 
	}
	else
		echo "no"; 
}
else
	echo "no"; //Invalid Login
 
 
?>
[PHP] pobierz, plaintext 

secure.php

[PHP] pobierz, plaintext 
<?php
 
session_start();
//  Developed by Roshan Bhattarai 
//  Visit <a href="http://roshanbh.com.np" target="_blank">http://roshanbh.com.np</a> for this script and more.
//  This notice MUST stay intact for legal use
 
// if session is not set redirect the user
if(empty($_SESSION['u_name']))
	header("Location:index.html");	
 
//if logout then destroy the session and redirect the user
if(isset($_GET['logout']))
{
	session_destroy();
	header("Location:index.html");
}
 
<h1> zalogowano i jesteśmy w panelu </h1>
[PHP] pobierz, plaintext 

a tutaj jest ten plik CRMmainPages.php, który chcę aby się uruchomił po wpisaniu loginu i hasła w formularzu logowania (index.html) Jest to wersja pliku gdzie otwiera się poprzez ta autoryuzację przez okienko logowania przeglądarki interentowej. I teraz jak go przerobić i wkleić w secure.php aby działało proszę o pomoc...

[PHP] pobierz, plaintext 
    <title>activeCRM ver 2.0</title>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <script src="js/jquery-1.4.4.min.js" type="text/javascript"></script> 
    <script src="js/jquery.hashchange.min.js" type="text/javascript"></script>
    <script src="js/imieniny.js" type="text/javascript"></script>
    <script type="text/javascript" src="./js/jquery.tablesorter.js"></script> 
    <link rel="stylesheet" href="./css/MainStyle.css" type="text/css" media="screen" />
    <link href="favicon.ico" rel="shortcut icon">
<?php
function cgs()
 
{
$czas = explode(" ", microtime());
$a = (double)$czas[0];
$b = (double)$czas[1];
return $a + $b;
}
 
$start = cgs();
 
 
include './class/mysql.connect.php';
$user_zalogowany = $_SERVER['PHP_AUTH_USER'];
$haslo_user = $_SERVER['PHP_AUTH_PW'];
 
$sql_select_user = mysql_query("select *from CRM_db_data_users where loginCRM_db_data_users = '$user_zalogowany' and passwordCRM_db_data_users = '$haslo_user' and flagaCRM_db_data_users = '1'");
 
if (mysql_num_rows($sql_select_user) != '0'){
while ($zm_select_user = mysql_fetch_array($sql_select_user)) {
   $idpartner = $zm_select_user['idCRM_db_data_users'];
   $poziom_uprawnien = $zm_select_user['puCRM_db_data_users'];
}
$sql_par = mysql_query("select *from CRM_db_data_partner_indywidualny where idCRM_db_data_partner = '$idpartner'");
while ($zal = mysql_fetch_array($sql_par)){
    $ImiePartner = $zal['imieCRM_db_data_partner'];
    $NazwiskoPartner = $zal['nazwiskoCRM_db_data_partner'];
}
$sqlpoziom = mysql_query("select *from CRM_db_data_partner_status where userCRM_db_data_partner_status = '$idpartner'");
while ($zkpoziom = mysql_fetch_array($sqlpoziom)){
    $poziom = $zkpoziom['poziomCRM_db_data_partner_status'];
    $sqlopis = mysql_query("select *from CRM_db_data_partner_poziom where idCRM_db_data_partner_poziom = '$poziom'");
        while ($zmopis = mysql_fetch_array($sqlopis)){
            $nazwaPoziom = $zmopis['opispCRM_db_data_partner_poziom'];
        }
}
$sql_menu = mysql_query("select *from CRM_db_data_partner_premission where partnerCRM_db_data_partner_premission = '$idpartner'");
while ($zmup = mysql_fetch_array($sql_menu)) {
    $menu1      =    $zmup['z1CRM_db_data_partner_premission']; // oranizer
    $menu2      =    $zmup['z2CRM_db_data_partner_premission'];
    $menu3      =    $zmup['z3CRM_db_data_partner_premission'];
    $menu4      =    $zmup['z4CRM_db_data_partner_premission'];
    $menu5      =    $zmup['z5CRM_db_data_partner_premission']; // szkolenia
    $menu6      =    $zmup['z6CRM_db_data_partner_premission'];
    $menu7      =    $zmup['z7CRM_db_data_partner_premission'];
    $menu8      =    $zmup['z8CRM_db_data_partner_premission'];
    $menu9      =    $zmup['z9CRM_db_data_partner_premission']; // poczta
    $menu10      =    $zmup['z10CRM_db_data_partner_premission'];
    $menu11      =    $zmup['z11CRM_db_data_partner_premission'];
    $menu12      =    $zmup['z12CRM_db_data_partner_premission'];
    $menu13      =    $zmup['z13CRM_db_data_partner_premission']; // partnerzy
    $menu14      =    $zmup['z14CRM_db_data_partner_premission'];
    $menu15      =    $zmup['z15CRM_db_data_partner_premission'];
    $menu16      =    $zmup['z16CRM_db_data_partner_premission'];
    $menu17      =    $zmup['z17CRM_db_data_partner_premission']; // klienci
    $menu18      =    $zmup['z18CRM_db_data_partner_premission'];
    $menu19      =    $zmup['z19CRM_db_data_partner_premission'];
    $menu20      =    $zmup['z20CRM_db_data_partner_premission'];
    $menu21      =    $zmup['z21CRM_db_data_partner_premission']; // produkty
    $menu22      =    $zmup['z22CRM_db_data_partner_premission'];
    $menu23      =    $zmup['z23CRM_db_data_partner_premission'];
    $menu24      =    $zmup['z24CRM_db_data_partner_premission'];
    $menu25      =    $zmup['z25CRM_db_data_partner_premission']; // rozliczenia
    $menu26      =    $zmup['z26CRM_db_data_partner_premission'];
    $menu27      =    $zmup['z27CRM_db_data_partner_premission'];
 
    $menu28      =    $zmup['z28CRM_db_data_partner_premission'];
    //$menu29      =    $zmup['z29CRM_db_data_partner_premission']; // statystyki
    $menu30      =    $zmup['z30CRM_db_data_partner_premission'];
    $menu31      =    $zmup['z31CRM_db_data_partner_premission'];
    $menu32      =    $zmup['z32CRM_db_data_partner_premission'];
    //$menu33      =    $zmup['z33CRM_db_data_partner_premission']; // raporty
    $menu34      =    $zmup['z34CRM_db_data_partner_premission'];
    $menu35      =    $zmup['z35CRM_db_data_partner_premission'];
    $menu36      =    $zmup['z36CRM_db_data_partner_premission'];
    $menu37      =    $zmup['z37CRM_db_data_partner_premission']; //  pomoc
    $menu38      =    $zmup['z38CRM_db_data_partner_premission'];
    $menu39      =    $zmup['z39CRM_db_data_partner_premission'];
    $menu40      =    $zmup['z40CRM_db_data_partner_premission'];
    $menu41      =    $zmup['z41CRM_db_data_partner_premission']; // administracja
    $menu42      =    $zmup['z42CRM_db_data_partner_premission'];
    $menu43      =    $zmup['z43CRM_db_data_partner_premission'];
    $menu44      =    $zmup['z44CRM_db_data_partner_premission'];
 
}
?>
<table name="glowna" width="100%" border ="0">
<!-- wiersz 1 -->
<tr>
<td border="0" colspan="2" >
	<table class="menu_up" border="0" width="100%">
    <tr>
 
.... // tutaj ta część mniej ważna już / wyciąłem ją/
 
<tr><td><div class="przerwa_mala"></div>
<?php
 
$koniec = cgs();
 
$ile = $koniec - $start;
 
 $CZAS = substr($ile, 0, 5);
 
?>
   <div class="menudown">ActiveCRM ver 2.0 <?php echo date('d/m/Y');?>r. <?PHP ECHO 'czas ładowania : '.$CZAS ?> </div>
   <?php
}else
{
 echo '<div class="menudown"><font color="red">  Niestety nie widniejesz w systemie !!</font>Proszę o kontakt <a href="mailto:lukasz.iwaniec.@activefinance.pl">lukasz.iwaniec@activefinance.pl</a> ';
}
 
?></td></tr>
</table>
 
[PHP] pobierz, plaintext 

dodam że połączenie z bazą i sam panel logowania działa okej, wyświetlany jest secure.php itd. po prawidłowym zalogowaniu.