secure AJAX update.php with init.php

The following warnings occurred:

Warning [2] Undefined variable $unreadreports - Line: 26 - File: global.php(961) : eval()'d code PHP 8.2.25 (Linux)

File	Line	Function
/global.php(961) : eval()'d code	26	errorHandler->error
/global.php	961	eval
/printthread.php	16	require_once

secure AJAX update.php with init.php - Printable Version

+- UserSpice (https://userspice.com/forums)
+-- Forum: Miscellaneous (https://userspice.com/forums/forumdisplay.php?fid=28)
+--- Forum: Modifications and Hackery (https://userspice.com/forums/forumdisplay.php?fid=29)
+--- Thread: secure AJAX update.php with init.php (/showthread.php?tid=421)

secure AJAX update.php with init.php - emanresu - 01-09-2017

I have a page that calls update.php via jQuery whenever a input field is changed. How do I check if a user is logged in? do I have to also load init.php at the top of update.php?

I currently use the following code:

<pre>

Code:
<?php

require_once 'users/init.php';

if($user->isLoggedIn()){ 

   //some script

}

else{

 echo 'go away!';

}

?>

</pre>

But I wonder if this is the correct way or if there is a better way.

secure AJAX update.php with init.php - mudmin - 01-11-2017

You're exactly right.

Code:
if($user->isLoggedIn()){ }

is the way to go. There are other ways to detect if the user variable is set or something like that, but isLoggedIn is the official and most reliable way to do it.