I'm developing a new site engine and I'm having a little trouble with the cookies.
How this site engine works is, the pages are in txt files. All the "plain" text is kept in $rb->{content}, and all the "perl" text is evaluated at the end if there was any, which oftentimes manipulates $rb->{content} further.
An <include> tag can allow one page to include the contents of another.
So, here are some pages of interest:
login.txt (the login page)
dologin.txt (the "do login" page, which sets cookies and whatnot)
And this is the page I'm having trouble with: I'm trying to delete the session cookie, but it doesn't delete it, it leaves it completely alone (I've tried croak $cgi->header to see which headers it was printing and they appear to be fine).
$rb->{header} is a flag which, when set, tells the main script not to print out the HTTP headers because one of the pages already printed their own.
If you need any more information, tell me and I'll try to give as much info as possible if it will help the issue at all.
Session cookies are session temporary so it's not an urgent issue, just I'd like to allow people to log out without closing all their browser windows.
Thanks in advance.
How this site engine works is, the pages are in txt files. All the "plain" text is kept in $rb->{content}, and all the "perl" text is evaluated at the end if there was any, which oftentimes manipulates $rb->{content} further.
An <include> tag can allow one page to include the contents of another.
So, here are some pages of interest:
login.txt (the login page)
Code:
<title>Sign In</title>
<div class="infobox">
<div class="infotitle">Sign In to Your Account</div>
<div class="infotext">
%error%
<form name="login" action="%link=>dologin" method="post">
<input type="hidden" name="linkto" value="user">
<div align="center">
<table border="0" cellspacing="2" cellpadding="0">
<tr>
<td align="left" valign="middle">
Username:
</td>
<td align="left" valign="middle">
<input type="text" size="20" name="user" class="entry">
</td>
</tr>
<tr>
<td align="left" valign="middle">
Password:
</td>
<td align="left" valign="middle">
<input type="password" size="20" name="pass" class="entry">
</td>
</tr>
<tr>
<td colspan="2" align="right" valign="middle">
<input type="checkbox" name="remember" value="yes" id="memory">
<label for="memory">Remember me</label>
</td>
</tr>
<tr>
<td colspan="2" align="right" valign="middle">
<input type="submit" value="Sign In!" class="bttn">
<input type="button" value="New User" class="bttn" onClick='self.location="%link=>newuser"'>
</td>
</tr>
</table>
</div>
</form>
</div>
</div><p>
<perl>
my $error = $query{error} || '';
if ($error eq 'username') {
$rb->{content} =~ s/%error%/Error: that username doesn't exist!/g;
}
elsif ($error eq 'password') {
$rb->{content} =~ s/%error%/Error: your password was incorrect!/g;
}
else {
$rb->{content} =~ s/%error%//g;
}
# If we're already logged in...
if ($rb->{logged_in} == 1) {
$rb->{content} = "";
}
</perl>dologin.txt (the "do login" page, which sets cookies and whatnot)
Code:
<title>Sign In</title>
<perl>
# Get login arguments.
my $linkto = $query{linkto} || 'user';
my $user = $query{user};
my $pass = $query{pass};
my $memory = $query{remember} || 'no';
# Format the username.
$user = &normalize ($user);
# Encode their password.
$pass = md5_hex ($pass);
# See if this user exists.
if (&userExists($user)) {
# Load their profile.
&profileLoad ($user);
# Get the user's actual password and key.
my $md5 = $rb->{users}->{$user}->{password};
my $key = $rb->{users}->{$user}->{crypt};
# See if the passwords match.
if ($pass eq $md5) {
# Login was successful. Generate their Session ID.
my $ses = &genSession ($user,$md5,$key);
# Create their cookies.
my $usercookie;
if ($memory eq 'yes') {
$usercookie = $cgi->cookie (
-name => $rb->{site}->{cookies}->{username},
-expires => '30d',
-value => $user,
-domain => $rb->{site}->{cookies}->{domain},
);
}
else {
$usercookie = $cgi->cookie (
-name => $rb->{site}->{cookies}->{username},
-value => $user,
-domain => $rb->{site}->{cookies}->{domain},
);
}
my $sescookie = $cgi->cookie (
-name => $rb->{site}->{cookies}->{session},
-value => $ses,
-domain => $rb->{site}->{cookies}->{domain},
);
# Print the headers.
print $cgi->header (
-content_type => 'text/html',
-cookie => [ $usercookie, $sescookie ],
);
$rb->{header} = 1;
$rb->{content} = "<include:$linkto>";
}
else {
$rb->{content} = "<include:login?error=password>";
}
}
else {
$rb->{content} = "<include:login?error=username>";
}
</perl>And this is the page I'm having trouble with: I'm trying to delete the session cookie, but it doesn't delete it, it leaves it completely alone (I've tried croak $cgi->header to see which headers it was printing and they appear to be fine).
Code:
<title>Sign Out</title>
<div align="center">
<div class="infobox">
<div class="infotext" align="center">
<a href="%link=>index">Return to RainbowBoi</a>
</div>
</div>
</div>
<perl>
# Clear the session cookie.
my $sescookie = $cgi->cookie (
-name => $rb->{site}->{cookies}->{session},
-value => '',
-expires => '-1d',
);
print $cgi->header (
-content_type => 'text/html',
-cookie => [ $sescookie ]
);
$rb->{header} = 1;
</perl>$rb->{header} is a flag which, when set, tells the main script not to print out the HTTP headers because one of the pages already printed their own.
If you need any more information, tell me and I'll try to give as much info as possible if it will help the issue at all.
Session cookies are session temporary so it's not an urgent issue, just I'd like to allow people to log out without closing all their browser windows.
Thanks in advance.