Who is logged in?

[Sigrist]

Re: Who is logged in?

Steve,

many thanks for the last suggestion. I moved the code up and it works as expected.

Andy Sigrist

[Sigrist]

Re: Who is logged in?

During testig of the new function I noted that a record is being created in Web_Log.Dbf regardless of whether the user entered a valid Username / Password or not.

If a user enters a wrong Username or Password, the system does not log the user in, but a record is still added in Web_Log.Dbf. I tried to write Xbasic code to validate the Username against the the list of valid users, but have not achieved this yet. Is there a command or template that you can suggest?

Thanks

Andy Sigrist

[Peter.Greulich]

Re: Who is logged in?

During testig of the new function I noted that a record is being created in Web_Log.Dbf regardless of whether the user entered a valid Username / Password or not.

If a user enters a wrong Username or Password, the system does not log the user in, but a record is still added in Web_Log.Dbf. I tried to write Xbasic code to validate the Username against the the list of valid users, but have not achieved this yet. Is there a command or template that you can suggest?

Andy,

I'm not sure if there is a solution using your method or not, but usually we use a different methodology to register logins, namely running an interim xbasic page that fires after the user has logged in using the web security page setting pointing to an xbasic a5w page. The page only runs if the user successfully logs in (and also redirects to where you want the user to go).

[JerryBrightbill]

Re: Who is logged in?

There are a couple simple methods to capture who logged in. Peter mentioned one, which is to use the logging method. Another is similar to Steve's solution, but places the code differently. The source view of an a5w page that has a login component will have a section of code that runs the component, and then may redirect after login like this:

x_login = a5w_run_Component(tmpl_login)
'=============================================================================================================
if x_login.RedirectURL <> "" then

The xxx.RedirectURL will only have a value if a login is successful. Therefore the if statement is only true after a successful login, so any code that should run after a login right can be placed after the last line above and before the actual redirect shown here:

	response.redirect(x_login.redirectURL)
	end
end if

You don't need to check any values such as "submitbutton". You can still capture "userid" which is more accurately referenced as request.variables.userid, but a better solution is to use the function A5WS_Logged_In_User_Values() and capture the actual values accepted. Putting that alltogether, the result would be something like this:

if x_login.RedirectURL <> "" then 
	dim pUser as p
	a5ws_Logged_In_User_Values(pUser)
	if pUser.Userid <> "" ' should always be true after a successful login
		tbl = table.open("[PathAlias.ADB_Path]\Web_Log.dbf")
		tbl.enter_begin()
		tbl.Userlogin = pUser.Userid
		tbl.Logindate = Date()
		tbl.logintime = Time()
		tbl.enter_end()
		tbl.close()
	end if 
	response.redirect(x_login.redirectURL)
	end
end if

Checking to see if pUser.Userid has a value isn't really necessary as it must after a successful login, but it is a good practice anyway.

V11 has a new function named A5ws_GetCurrentUser() which returns the userid of the current logged in user.

[Sigrist]

Re: Who is logged in?

Peter, Jerry,

first, thank you for your replies and your help. I really appreciate it.

Since I posted this question, I have found an alternate solution that appears to work (See attached picture of the fist part of my Login.A5W page). I use the following code to check for a valid UserID:

DIM USERIDFLG as L
USERIDLST = A5WS_Get_Users()
USERIDFLG = *any(USERIDLST, userid)
If USERIDFLG = .T.

I will try your solution today as well.

Andy

UserID.jpg

[swest]

Re: Who is logged in?

I am trying to do something similar here, instead of creating a table and recording last login date and time. I am trying to open a SQL table and record the last login date and time in an existing field in the table. How would I modify the above code to achieve opening the sql table and recording this in a existing field?

[Peter.Greulich]

Re: Who is logged in?

Web Security allows you to create a function to capture relevant data. Look in security settings for Log File.

Here is one I use:

function saveLoginLog as v (e as p)
'-- Values Available - Data type - Description
'e.session - Pointer - session variables. TIP: To set a session variable: e.Session.myNewSessionVariable = "Alpha"
'e.userid - Character - userid of the logged in user
'e.ulink - Character - 'ulink' value saved for the logged in user
'e.passexp - Time - a time value indicating when the user's password will expire
'e.loginexp - Time - a time value indicating when the login will expire
'e.loginerror - Character - any error message returned from a login component if a login failed
'e.IP - Character - IP address of the remote client making the request
'e.logout - Logical - Default is .F., will be .T. if the action is a 'log out'
''===============================================================================
Dim conn as SQL::connection
Dim args as SQL::Arguments
Dim SQL as c

vHost = request.host
vNow = now()

If e.logout = .T.
	vType = "LogOut"
	vExpires = vNow 
Else
	vType = "LogIn"
	vExpires = vNow + (session.timeout*60)
End If

args.add("LoginName",e.userid)
args.add("DateTime",vNow)
args.add("Type",vType)
args.add("IP",e.IP)
args.add("LogExpires",vExpires)
args.add("PwdExpires",e.passexp)
args.add("LogError",e.loginerror)
args.add("Host",vHost)

SQL = "INSERT INTO Login_Activity (LogLoginName, LogDateTime, LogType, LogIP, LogExpires, LogPwdExpires, LogError, LogHost) VALUES (:LoginName, :DateTime, :Type, :IP, :LogExpires, :PwdExpires, :LogError, :Host)"

conn.open("::Name::System")							
conn.execute(SQL, args)
conn.close()

end function

Note: e.logout wasn't working for me thus the work-around.

[aburningflame]

Re: Who is logged in?

I think this is all completely overboard for what he needs to do - its pretty simple.
I think he just wants to display the username of who is logged in.

Assuming you are using the ulink field (which most applications will) - you can do a lookup from the websecurity fields. (note the following is for mysql, but it should be transferable to dbf, maybe a dbf guy can help you on this one) -anyhow
If youre not using ulink there is PROBABLY some a5ws_get_Guid function for the current user, and u can use that and hte guid field instead.

<%a5
dim args as SQL::Arguments
args.set("ulink",session.__protected__ulink)
dim email_logged_in as C=convert_type(sql_lookup("::name::conn","websecurity_users","ulink=:ulink","userid",args),"C")
?"You are logged in as: "+email_logged_in
%>

This would display
You are logged in as: [email protected]

Is this what you needed?
If you need the users' first name and last name, then you need to create a web_user table or a person table or something else and link those based on ulink.

Then you can lookup based on that table and the ulink.

If you are willing to pay for 1 on 1 help, we could do a gotomeeting and take a look together.

Anyhow,
Goodluck!

[swest]

Re: Who is logged in?

I have what I need working with this issue, wasnt sure if you replying to me or someone else.