Tips

Tips, tips, tips

all protected pages must require admin_only.php at the top of each page
cookies must be enabled in your browser - cookies are automatically removed when the session ends. Your session will end when you close your browser
for best security your server should run a recent PHP version

Notes

keep in mind your password is sent "in the clear". A network sniffer can intercept your unencrypted password
if your server allows it, connect to admin.php using a secure https:// connection. The small overhead in time delay is well worth the resulting encrypted safety
you must run PHP 4.1.2 (or higher) when using admin-login-only version 3.x or higher
PHP documentation: http://php.net/manual/en/features.sessions.php

Protected page is in a different folder

If the page to protect is in a different folder than admin-only.php the content can still be protected by using the absolute or relative path to admin_only.php in the require_once declaration, like this:

<?php require_once("/htdocs/label/folder/admin-login-only/admin_only.php");?>

The simple solution is to place pages to protect inside the /admin-login-only folder.