/    Sign up×
Community /Pin to ProfileBookmark

Login Script Problem

Hi there,
Little problem my script. It worked fine earlier when was only one user in my database but now ive added more it dosent work!

example username = srobinson
password = password

[url]www.loddonexplorers.co.uk/Design/New/Login.php[/url]

Code is below,
Cheers

[code=php]
<?php session_start(); ?>
<?php require(“Template_Top.php”); ?>

<h2> Register System </h2>

<?php

include(“ErrorMailer.php”);

$_SESSION[‘Username’] = “”;
IF ($_POST[‘_submit_check’]) :
IF (validate_form()) :
$_SESSION[‘Username’] = $_POST[‘Username’];
process_form();
ELSE :
show_form(‘Enter a valid username and password!’);
ENDIF;
ELSE :
show_form();
ENDIF;

function process_form() {

$DBUserID= $_SESSION[Username];
$DBDate = date(‘Y-m-d’);

$userconn = @mysql_connect(“localhost”, “lx”, “xin”) or die(“ERROR: Unable to establish database connection”);
$dbconn = @mysql_select_db(“loddouk1_main”) or die( “Unable to select database”);

$sql = “SELECT * FROM tblRegister WHERE UserID=’$DBUserID’ AND `TimeStamp`=’$DBDate’ ORDER BY `TimeStamp` DESC LIMIT 1”;
$qry = mysql_query($sql) or dying_mail(“Query failed ($sql) ” . mysql_error() . “<br><br>This error has been reported! I’ll fix it sometime soon (Very soon…) !”);

IF ($qry) :
IF (mysql_num_rows($qry) == 1) :
print “You have already logged in today! Thank you.”;
ELSE :
$sql2=”INSERT INTO tblRegister VALUES(null,’$DBUserID’,’$DBDate’)” ;
$Qry2 = mysql_query($sql2) or dying_mail(“Query failed ($sql2) ” . mysql_error()); ;
IF ($Qry2) :
print ‘You are logged in as: <b>’.$_SESSION[‘Username’].'</b>’.str_repeat(‘&nbsp;’, 10).'<a href=”RegLogout.php”>Logout</a><br />’;
print ‘<p>You can continue processing as a logged-in user …………</p>’;
ELSE :
print “test”;
ENDIF;
ENDIF;

/*

$sql4 = “SELECT Admin FROM tblExplorerGroup WHERE Username=’$DBUserID’ LIMIT 1”;
$qry4 = mysql_query($sql4) or dying_mail(“Query failed ($sql4) ” . mysql_error()); ;
IF ($qry4) :
$ADMINrole = mysql_fetch_assoc($qry4);
IF($ADMINrole[‘Admin’] == “Y”) :
echo “You Can Administer this page!”;
exit;
ELSE :
echo “You Cannot Administer this page!”;
ENDIF;
ENDIF;

*/

ENDIF;
}

function show_form($errors = ”) {
IF (!is_array($errors)) :
$errors = array($errors);
ENDIF;
IF (count($errors) > 0) :
print ‘<span style=”color:red”>’;
FOREACH ($errors as $thisERROR) :
print ‘<ul><li><b>’ . $thisERROR . ‘</b></li></ul>’;
ENDFOREACH;
print ‘</span>’;
ENDIF;
print ‘<form name=”authForm” method=”POST” action=”‘.$_SERVER[‘PHP_SELF’].'”>’;
print ‘<table><tr><td width=”50″>’;
print ‘Username </td><td width=”50″><input type=”text” name=”Username” value=”‘ . htmlentities($_POST[‘Username’]) . ‘”> <br />’;
print ‘</td></tr><tr><td width=”50″>Password</td><td width=”50″><input type=”password” name=”Password” value=”‘ . htmlentities($_POST[‘Password’]) . ‘”> <br />’;
print ‘</td></tr><tr><td width=”50″></td><td width=”50″><input type=”submit” name=”login” value=”Login” /></td></tr></table>’;
print ‘<input type=”hidden” name=”_submit_check” value=”1″/>’;
print ‘</form>’;
}

function validate_form() {
$userconn = @mysql_connect(“x”, “xn”, “x”) or die(“ERROR: Unable to establish database connection”);
$dbconn = @mysql_select_db(“loddouk1_main”) or dying_mail( “Unable to select database”);

$UserID = $_POST[‘Username’];
$UserPass = $_POST[‘Password’];

$sql3 = “SELECT Username FROM tblExplorerGroup WHERE Username=’$UserID’ AND Password=’$UserPass’ LIMIT 1”;
$qry3 = @mysql_query($sql3) or die(“Query failed ($sql3) ” . mysql_error()); ;

$returnCODE = FALSE;
IF ($qry3) :
IF (mysql_num_rows($qry3) == 1) :
$returnCODE = TRUE;
ENDIF;
ENDIF;
return $returnCODE;
}

?>
<?php require(“Template_Bottom.php”); ?>
[/code]

to post a comment
PHP

3 Comments(s)

Copy linkTweet thisAlerts:
@NightShift58Jan 09.2007 — Hi,

Are you'sure the password isn't encrypted in the table?
Copy linkTweet thisAlerts:
@NightShift58Jan 09.2007 — If you changed this:[code=php]$returnCODE = FALSE;
IF ($qry3) :
IF (mysql_num_rows($qry3) == 1) :
$returnCODE = TRUE;
ENDIF;
ENDIF;
return $returnCODE;[/code]
t:[code=php]$returnCODE = FALSE;
IF ($qry3) :
$ROWSfound = mysql_num_rows($qry3);
IF (mysql_num_rows($qry3) == 1) :
$returnCODE = TRUE;
ELSE :
print $ROWSfound . "<hr>" . $sql3 . "<br>";
ENDIF;
ENDIF;
return $returnCODE;[/code]
it could tell us part of what may have happened.
Copy linkTweet thisAlerts:
@NightShift58Jan 10.2007 — I copied the relevant part of the script ([b]validate_form[/b]) to my server, and set up a table with 3 users:

sparson - password

night - shift

loddon - explorers.

It's validating here... See: http://www.nightshift58.com/webdev/test.password.php

So the problem may well be somewhere else...
×

Success!

Help @scottyrob spread the word by sharing this article on Twitter...

Tweet This
Sign in
Forgot password?
Sign in with TwitchSign in with GithubCreate Account
about: ({
version: 0.1.9 BETA 5.6,
whats_new: community page,
up_next: more Davinci•003 tasks,
coming_soon: events calendar,
social: @webDeveloperHQ
});

legal: ({
terms: of use,
privacy: policy
});
changelog: (
version: 0.1.9,
notes: added community page

version: 0.1.8,
notes: added Davinci•003

version: 0.1.7,
notes: upvote answers to bounties

version: 0.1.6,
notes: article editor refresh
)...
recent_tips: (
tipper: @AriseFacilitySolutions09,
tipped: article
amount: 1000 SATS,

tipper: @Yussuf4331,
tipped: article
amount: 1000 SATS,

tipper: @darkwebsites540,
tipped: article
amount: 10 SATS,
)...