Posted by Sean
2013-10-24

Hey tom, I would like to commend you on the work your doing here, very fantastic stuff.
Anyway I used the protect html script to create private work folders for a few of my colleagues, and it seemed to work well until they realized that once one person had signed in, they could access all of the other protected folders simply by changing the name in the address bar e.g from sean/home.html to tom/home.html. This has put me in quite a bit of trouble and I need to rectify it as soon as possible. Please help me with a solution. Thanks . P.s Sorry for the duplicate, I just realized I wrote it in the wrong category.
Posted by Tom
2013-10-24

Hi Sean, here is a solution.
Open _protect_.php and find this line:
define( 'KEY_LOGGED_IN', '_logged_in_' );
Append " . __FILE__" to _logged_in_ like shown below
define( 'KEY_LOGGED_IN', '_logged_in_' . __FILE__ );
Use the modified _protect_.php for each protected folder.