Sorry, Had not set a "loginpage" hence the refresh problem. XD

Have updated "settings.php" page so when you login, it will redirect you back to the page where you originally clicked the login button as i think this would make more sense?

Also Tidied up "demo.php" page for easier readability

Did you test it?
AFAIK PHP_SELF will be either /steamauth/settings.php or / because of the redirection from steam.
Also, what exactly is your "refresh problem"?
While the changes to the demo make sense the one in the settings doesnt.

Please split them up at least. 2 Features/Changes = 2 PRs.

• steam redirects back to the origin page so PHP_SELF is the origin page ie /demo.php (doesnt refer to /steamauth/settings.php page) - have tested with demo page and example page
• the "refresh problem" i was getting was because no $steamauth['loginpage'] was specified so was not redirecting/reloading after signin
• will split it into 2 different PRs now

Have updated now.

Changed they way i did it so "settings.php" file remains unchanged but updated the steamlogin() function so if $steamauth['loginpage'] is not set to a specific page in the settings then it will reload the page you are currently on.

Seems fine now.
I actually made the same change a few month ago, but we made a rollback because there were too many bugs in a bunch of commits.

just had a look

if($steamauth['loginpage'] !== "") {
    $returnTo = $steamauth['loginpage'];
} else {
    //Determine the return to page. We substract "login&"" to remove the login var from the URL.
    //"file.php?login&foo=bar" would become "file.php?foo=bar"
    $returnTo = str_replace('login&', '', $_GET['openid_return_to']);
    //If it didn't change anything, it means that there's no additionals vars, so remove the login var so that we don't get redirected to Steam over and over.
    if($returnTo === $_GET['openid_return_to']) $returnTo = str_replace('?login', '', $_GET['openid_return_to']);
}

not sure why that wouldn't have worked.
only thing i can see is $returnTo = str_replace('login&', '', $_GET['openid_return_to']); wouldnt do anything due to if there was a "&" in the return url it would be interpreted as a new $_GET param in the current url and therefore disregarded/not included in the $_GET['openid_return_to'] param?

this could also work instead:

if (empty($steamauth['loginpage'])) {
    $steamauth['loginpage'] = str_replace('?login', '', $_GET['openid_return_to']);
}
header('Location: '.$steamauth['loginpage']);

Steam strips any GET-parameters from the return-url automatically, so it didnt work.
After that we tried to get it to work in some way, but it only made things worse.

i feel like my changes should work, have tested it out on a localserver and c9 server and my own site, all seemed to work fine.

RedSparr0w@228e868 fixes #107

also feel free to test out my version of this code here (demo.php) and here (example.php)

Btw the version # is 3.0

Make sure u change that on the website view b/c it says 2. Something

Thanks, Updated [=

1869d2c created a conflict in the README file, I've fixed this and merged.