Menu
i am trying to make a login page for my website using msql and phpmyadmin can someone pleaswe help me with the connection codeP.S i am not using localhost i am using a web server: host gator…
[code=php]
<?php
$db_name = "YOUR_DATABASE_NAME";
$db_user = "YOUR_DATABSE_USERNAME";
$db_password = "YOUR_DATABSE_PASSWORD";
$db_table = "YOUR_DATABSE_TABLE";
function getDB() {
try {
$dbho = new PDO('mysql:host=localhost;dbname='.$db_name, $db_user, $db_password);
$dbho->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch(PDOException $e) {
exit("Failed to connect to the database! Better contact support and yell until this is fixed.");
break;
}
return $dbho;
}
$user = (isset($_POST['username'])) ? $_POST['username'] : "";
$pass = (isset($_POST['password'])) ? $_POST['password'] : "";
if($user != "" && $pass != "") {
$dbho = getDB();
$data = array("username"=>$user);
$stmt = $dbho->prepare("SELECT username, password FROM " . $db_table . " WHERE username = :username");
$stmt->execute($data);
if($stmt->rowCount() > 0) {
while($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
if($row['password'] == hash('sha256', $pass)) {
echo "You have been successfully logged in!";
// Additional login code would go here, either to set cookies or session data
break;
} else {
echo "It looks like the password you entered was incorrect. Double-check everything and try again or try resetting your password.";
break;
}
}
} else {
echo "We couldn't find the user '" . $user . "' anywhere in the database. Make sure you entered everything correctly and try again.";
}
} else {
echo "The username or password entered was empty!";
}
?>
[/code][code=php][code=html]<!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <title>sign up</title> <link rel="stylesheet" href="css/style.css" type="text/css"> </head> <body> <div id="header"> <div> </a> <ul> <li> <a href="index.html">Home</a> </li> <li class="selected"> <a href="signup.html">Sign Up</a> </li> <li> <a href="files.html">Files</a> </li> <li> <a href="about.html">About</a> </li> <li> <a href="contact.html">Contact</a> </li> </ul> </div> </div> <div id="body" class="home"> <div class="blog"> <div> </div> </div> <div class="article"> <div> <form action = "login.php" method="POST"> USERNAME: <input type="text" name="username"> PASSWORD: <input type="password" name="password"> <input type="submit"> </form> </div> </div> <div class="news"> <div> </div> </div> </div> <div id="footer"> <div> <div class="connect"> </div> </div> </div> </body> </html>[/code][code=php]<?php
$db_name = "*****";
$db_user = "*****";
$db_password = "*****";
$db_table = "members";
function getDB() {
try {
$dbho = new PDO('mysql:host=localhost;austen_login='.$db_name, $db_user, $db_password);
$dbho->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch(PDOException $e) {
exit("Failed to connect to the database! Better contact support and yell until this is fixed.");
break;
}
return $dbho;
}
$user = (isset($_POST['username'])) ? $_POST['username'] : "";
$pass = (isset($_POST['password'])) ? $_POST['password'] : "";
if($user != "" && $pass != "") {
$dbho = getDB();
$data = array("username"=>$user);
$stmt = $dbho->prepare("SELECT username, password FROM " . $db_table . " WHERE username = :username");
$stmt->execute($data);
if($stmt->rowCount() > 0) {
while($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
if($row['password'] == hash('sha256', $pass)) {
echo "You have been successfully logged in!";
// Additional login code would go here, either to set cookies or session data
break;
} else {
echo "It looks like the password you entered was incorrect. Double-check everything and try again or try resetting your password.";
break;
}
}
} else {
echo "We couldn't find the user '" . $user . "' anywhere in the database. Make sure you entered everything correctly and try again.";
}
} else {
echo "The username or password entered was empty!";
}
?>[/code]<form action="login.php" method="post" id="loginForm">
<fieldset>
<label for="loginUser">USERNAME:</label>
<input type="text" name="username" id="loginUser" />
<label for="loginPass">PASSWORD:</label>
<input type="password" name="password" id="loginPass" />
</fieldset>
<div class="submitsAndHiddens">
<input type="submit" value="Login" />
<input type="hidden" name="fromForm" value="loginForm" />
</div>
</form><?php
$errors = [];
if (isset($_POST['fromForm']) && ($_POST['fromForm'] == 'userLogin')) {
<i> </i>if (isset($_POST['username']) && (isset($_POST['password'])) {
<i> </i> try {
<i> </i> $db = new PDO(
<i> </i> 'mysql:host=localhost;dbname=austen_login',
<i> </i> '', // user
<i> </i> '' // pass
<i> </i> );
<i> </i> } catch (PDOException $e) {
<i> </i> exit('Fatal Error, failed to connect to database.');
<i> </i> }
<i> </i> $stmt = $db->prepare('
<i> </i> SELECT id, username
<i> </i> FROM members
<i> </i> WHERE username = :username
<i> </i> AND password = :password
<i> </i> ');
<i> </i> $stmt->execute([
<i> </i> ':username' => $_POST['username'],
<i> </i> ':password' => hash('sha256', $_POST['password'])
<i> </i> ]);
<i> </i> if ($user => $stmt->fetch(PDO::FETCH_ASSOC)) {
<i> </i> echo 'You have been successfully logged in!';
<i> </i> } else {
<i> </i> $errors[] = 'Unknown user or invalid password, please try again.';
<i> </i> }
<i> </i>} else $errors[] = 'You failed to enter either a user name or password';
<i> </i>if (count($errors)) include('loginForm.php');
} else include('loginForm.php')
?><?php
echo '
<form action="login.php" method="post" id="login">';
if (isset($errors) && count($errors)) {
echo '
<i> </i> <ul class="errorList">';
<i> </i>foreach ($errors as $message) echo '
<i> </i> <li>', $message, '</li>';
<i> </i>echo '
<i> </i> </ul>';
}
echo '
<i> </i> <fieldset>
<i> </i> <label for="loginUser">USERNAME:</label>
<i> </i> <input type="text" name="username" id="loginUser" ', (
<i> </i> isset($_POST['username']) ?
<i> </i> 'value="' . htmlspecialchars($_POST['username']) . '" ' :
<i> </i> ''
<i> </i> ), '/>
<i> </i> <label for="loginPass">PASSWORD:</label>
<i> </i> <input type="password" name="password" id="loginPass" />
<i> </i> </fieldset>
<i> </i> <div class="submitsAndHiddens">
<i> </i> <input type="submit" value="Login" />
<i> </i> <input type="hidden" name="fromForm" value="login" />
<i> </i> </div>
<i> </i></form>';
?>[code=php]
// Hash the password - See above for details:
$password = password_hash($password, PASSWORD_BCRYPT, array("cost" => 15));
// Store user's credentials, if form data is validated:
if ($displayStatus == 'undetermined') {
// Using prepared statements:
$query = 'INSERT INTO users ( username, password ) VALUES ( :username, :password )';
$stmt = $pdo->prepare($query);
$result = $stmt->execute(array(':username' => $username, ':password' => $password));
$displayStatus = 'SUCCESS';
$displayUsername = $username;
} [/code][code=php]// Retrieve the user data from the database. If $row is false, then the username
// they entered is not registered.
$row = $stmt->fetch();
if($row)
{
// Verify Stored Hashed Password:
$result = password_verify($_POST['password'], $row['password']);
if ($result) {
$login_ok = true;
} else {
$errMsg = 'Invalid Credientials!';
}
}
[/code]0.1.9 — BETA 6.17