good advice needed

[benluke4]

Hi, im fairly new to php and mysql but have been progressing well but slowly.

This is my problem.

Hi have a site where there are 2 different member areas. one for coaches and one for clients.

They are set up securly using php and mysql and sessions.

What i need to do is install a message board that both clients and coaches can access but not the general public!

How would you do this??

I was thinking i could install something like PHPBB and put it behind a secure directory. The only problem with that is having to change the htpasswrd file every time a new user signs up and also having to email them their user and password.

Once they are logged in to either there client or coach area is there a way of linking them to the messageboard but not allowing the public to acces the message board

Is their a more effecient way to doing this than my idea?

Really appreciate any advice

Thanks

Ben

 

[CatPlus]

If the ISP allows .HTaccess then that's the way to go!

HTH

 

[benluke4]

yea the isp allows .htacces.

Is it possible to set htacces up so people only people coming from certain pages can access the directory. Say all the pages within the two member area's. That way i wouldn't have to send out usernames and password.

I have little knowledge of htaccess. If somebody knows a way that would be bloody fantastic

Thanks

Ben

 

[ChrisHirst]

PHPBB allows for private forums and groups so you can hide forums from other groups and/or public access.

Chris.

Indifference will be the downfall of mankind, but who cares?
Woo Hoo! the cobblers kids get new shoes.

http://www.cram-system.com

Nightclub counting systems

So long, and thanks for all the fish.

 

[benluke4]

so i could install PHPBB and just use a private forum. ok.

Still would like to know if the following is possible

"Is it possible to set htacces up so people only people coming from certain pages can access the directory. Say all the pages within the two member area's. That way i wouldn't have to send out usernames and password."

Thanks

Ben

 

[jpadie]

I would not use htaccess if the rest of your site uses a php style login authorisation schema.

most forum applications allow you to use your own user authorisation schemes in place of their standard ones. it will require tinkering with the bb code but often there are instructions how to do this. if not i am 100% positive that browsing the support forums/fora on your bulletin board of choice will yield information on how to customise your installation.

in answer to your direct question, it is not possible within htaccess (which is just a web-server directive) to limit access from certain referring pages. You can do this within php however. just test the $_SERVER['HTTP_REFERRER'] variable in your pages. However this can be fooled. better, imho, to use a proper login scheme.

 

[benluke4]

Ive had alook at PHPBB, if i set up a private forum. The users will have to register on the forum and then i will have to give them access to the secure forum. This wouldn't really work as they will want access straight away.

Any body still any thoughts about htacces

Thanks

Ben