Password protect user image album
- by Poland Rocks
Hi
Im making i photo sharint site
I want to give the ability for my users to prevent the public to acces their albums with a password. Then they can give the password to the ones they want to be able to see it.
To password protect their albums.
Im thinking something like this, cant test it on this computer, should work ok. but as im a php/mysql beginner i wanna hear what you experts think if theres a better way/approach
Albums
id
name
owner
password (if it isnt null the album is considered password protected)
The code
$id = isset($_GET['albumID']) ? intval($_GET['albumID']) : 0;
$result = mysql_query("SELECT * FROM albums
WHERE id = $id");
$row = mysql_fetch_object($result);
// IS it password protected?
if ($row->password != NULL) {
echo "This album is password protected.";
// User pressed "Enter"
if (!empty($_POST['password'])) {
$result = mysql_query("SELECT password FROM albums
WHERE password = '".mysql_real_escape_string($_POST['password'])."'");
// Was It right password?
if (mysql_num_rows($result) == 1)
{
$authed=1;
}
echo <<
<form method="post">
<input type="text" name="password" />
EOT;
exit;
} else $authed=1;
if $authed==1 {
// render albumimages etc
}