ft_api_login - permission problem

[Hannes]

I have a client (username/passwort) whom i want to login automatically.
Therefore I'm using the following script:

PHP Code:

<?php

require_once("global/api/api.php");

$account_info = array(

  "username" => "username",

  "password" => "password"

);

ft_api_start_sessions();

ft_api_login($account_info);

header("Location: index.php");

exit;

?>

[Ben]

Hi Hannes,

That should work... but try this instead. The ft_api_start_sessions function is really just for API forms.

PHP Code:

<?php

session_start();

header("Cache-control: private");

header("Content-Type: text/html; charset=utf-8");



require_once("global/api/api.php");

$account_info = array(

  "username" => "username",

  "password" => "password"

);

ft_api_login($account_info);



header("Location: index.php");

exit;

?>

[Hannes]

same thing happens:
when I login and logout the conventional way before going to this page it works.
But just running this script I don't have the permission.

[Ben]

Hey Hannes,

That's weird, I tested it out myself and it works okay.

So just to double check: every page that you go to AFTER logging in via the script and BEFORE linking to a Form Tools page has the session_start() stuff on it, correct?

Try this: add a little code to that page (or pages) to confirm that the login information is still in sessions.

PHP Code:

<?php print_r($_SESSION["ft"]); ?>

[Hannes]

Hey Ben,

thank you a lot for your efforts.
by the session_start() stuff you mean those lines?

PHP Code:

<?php 

require("../../global/session_start.php");

session_start();

header("Cache-control: private");

header("Content-Type: text/html; charset=utf-8"); 

[Ben]

Ah - first off, I wouldn't modify the core script. That won't be needed at that point anyway - the pages all start with the session_start(), so the following 3 lines you posted are just duplicates.

But no, I actually meant that any pages outside of Form Tools that you're users who login via the form are going to be navigating to before eventually ending up on a Form Tools page need to have those session_start lines.

If you're royally stuck, email me at ben.keen@gmail.com with your FTP info, a link to your api login form and a description of which pages the user will go to prior to going to Form Tools. I could then debug the problem directly.

- Ben

[Hannes]

Hi Ben,

thank you a lot for your effort.
but I still don't get it... there is no external file involved in this:

1. I installed a fresh downloaded version of formtools on my local server (php5).
   
2. I added a client called "username" with password "password".
   
3. I add a form and allow access to all clients.
   
4. I created a file forms/show.php with only the following content:
   
   PHP Code:

   <?php
   
   require("global/session_start.php");
   
   session_start();
   
   header("Cache-control: private");
   
   header("Content-Type: text/html; charset=utf-8");
   
   require_once("global/api/api.php");
   
   $account_info = array(
   
     "username" => "username",
   
     "password" => "password"
   
   );
   
   ft_api_login($account_info);
   
   header("Location: clients/forms/index.php?form_id=1");
   
   exit;
   
   ?>

[Ben]

Hi Hannes,

I tried that code and it actually works fine for me. One thing: remove the very first require() line.

PHP Code:

<?php 

require("global/session_start.php"); 

[Hannes]

Update: I just found this thread again because I needed the autologin feature again and wanted to confirm that it was the first line which is causing the error.

The way Ben wrote it is also working in 2.1:

PHP Code:

<?php

session_start();

header("Cache-control: private");

header("Content-Type: text/html; charset=utf-8");

require_once("global/api/api.php");

$account_info = array(

  "username" => "username",

  "password" => "password"

);

ft_api_login($account_info);

header("Location: clients/forms/index.php?form_id=1");

exit;

?>