CODEWITHSUNDEEP
phphtml
coding babe
coding babe

Reputation: 63

session not getting timed out in 5 seconds

Hey guys am trying to determine if two minutes are over in php..I have an input box and a php script that checks if 5 seconds are over or not..What i need is when the user inserts the correct value i just want to display password is correct and you are now logged in with the existing token.

After 5 seconds i want to display the message like you cant login with this token id anymore.

But the problem is everytime am geting the message you are now logged in with the existing token after 5 seconds. its not showing up the message you cant login .....

The code i have used..

<?php
    session_start();
$_SESSION['logintime'] = time();
$name = $_POST['fname'];
$tokenvalue = 'sample';
if($name != $tokenvalue) {
    echo 'the token is incorrect<br>';
} else {
    echo "the token is correct<br>";
}


if (time() > $_SESSION['logintime'] + 5) {
   echo 'you cant login with this token id anymore<br>';
} else {
echo 'you are now logged in with the existing token';
}

Hope can i diplay the message you cant login with this token id anymore after 5 seconds ??..

Where am i doing wrong ??..Any help would be apreciated..Thanx

Upvotes: 2

Views: 128

Answers (1)

Marc
Marc

Reputation: 3709

A PHP script is executed by the server. As soon as you see something in your browser, there is no action on the server anymore (at least in this script).

To accomplish what you are trying here, you need to use AJAX (asynchronous javascript and xml).

There are some things that are eglible in this case:

  • Hardcoded request after x-seconds with javascript (I would recommend using jQuery for this):

    setTimeout(function(){$('#message').load('myScript.php');}, 5000);

  • You could use SSE (Sever-Sent Events), where you open a persistent connection to the server and push the event after x-seconds. There are good tutorials on HTML5rocks and MDN.

  • You could use only javascript, because the message will only be on the client side - you need to validate the time anyways, before you save a user input. For this you could also use jQuery:

    setTimeout(function(){$('#message').html('you cant login with this token id anymore<br>');}, 5000);

Update: there are some things strange in your code (I will try to explain what I mean using comments):

<?php
    session_start();
    // you set the login, before you validate the users input
    $_SESSION['logintime'] = time();
    // thats okay, but actually not really necessary
    $name = $_POST['fname'];
    // thats okay for a test only :)
    $tokenvalue = 'sample';
    if($name != $tokenvalue) {
        // you should use exit() or die() when the login fails to end the script
        echo 'the token is incorrect<br>';
    } else {
        // first you use the word "token" now "password"
        echo "the password is correct<br>";
    }

    if (time() > $_SESSION['logintime'] + 5) {
        echo 'you cant login with this token id anymore<br>';
    } else {
        echo 'you are now logged in with the existing token';
    }

Update2: Maybe this helps you - it does what you described in the question:

<html>
    <head>
    </head>
    <body>
        <?php
            $tokenvalue = 'sample';
            if(isset($_POST['token'])){
                if($_POST['token'] === $tokenvalue) {
                    echo '<div id="success">The password is correct.<br>You are now logged in with the existing token.</div>';
                }
            }
        ?>
        <form action="" method="post">
            Token: <input type="text" name="token"><br>
            <input type="submit" value="Submit">
        </form>
        <script>
            if(typeof(document.getElementById('success')) != 'undefined') {
                setTimeout(function(){document.getElementById('success').innerHTML = "You can't login with this token anymore."},5000);
            }
        </script>
    </body>
</html>

Upvotes: 1

Related Questions