The Cookies are Broken

[Judahnator]

Me and a group of friends are developing a login process for our website. I put excerpts of the problem stuff in the zip at:

 

thosetechguys.org/debug.zip

 

My problem is, when the user logs in they are redirected to their profile page (loading and passing the auth process in the header). But, if you try to go anywhere else on the site (loading the auth process in the header) you fail the auth process and are redirected back to login.php. Anyone see my problem? I have searched the code for hours, and i cant find anything.

 

Thanks in advance,

 

~judah

[Adnanklink]

http://www.xdebug.org/docs/remote

 

This will help a lot, set frequent break points and follow the code until you spot the issue.

 

Note: you should be able to read the variables you have floating around at each one of those breakpoints.

[Ciccioo]

in login_form.php

	setcookie(TTGauth, $auth_cookie, time()+3600);	setcookie(TTGID, $username, time()+3600);

should be

	setcookie("TTGauth", $auth_cookie, time()+3600);	setcookie("TTGID", $username, time()+3600);

 

anyway i see you're trying to make it safe, but it's still vulnerable to cookie stealing

consider using sessions instead