MySQL Help!!!

ddrummond

Hi,

I create this script to log user in my website restrict area, I have tree pages to run: 1st. page is the .html from, 2nb. page is the .php:

<?php

require 'functions.php';

if (authenticateUser($form_user_id, $form_password))
{
	setcookie("cookie_passwd", "$form_password");
	setcookie("cookie_user", "$form_user_id");

header("Location:http://$HTTP_HOST/$DOCROOT/menu.html");
	exit();

}else{

header("Location:http://$HTTP_HOST/$DOCROOT/erro/erro_1.html");
	exit();
}

3rd. page (functions.php):

<?php

require 'common.inc';

// Autenticação de usuário
function authenticateUser($form_user_id, $form_password)
{
global $db_server, $HTTP_HOST, $db_login, $db_password, $db, $DOCROOT ;

// Conecta Banco de Dados
 $conn = mysql_connect ("$db_server", "$db_login", "$db_password")
            or die ("Ocorreu um erro na ligação ao servidor MySQL.");

mysql_select_db("$db");

//Seleciona usuário
$result = mysql_query("select * from user_profile where user_id = '$form_user_id' and password = 'form_password'");

if (!mysql_num_rows($result)) {
	return 0 ;
	} else {
	return 1 ;
	}
}

My problems: always return error_1.html. Help me please !!!!!!!!!!! Sorry my English.

techek

Try changing :

<?php
if (!mysql_num_rows($result)) {
?>

.. into :

<?php
if (mysql_num_rows($result) != 1) { // if not exactly one row is found, ..
?>

Note : Have a look at the md5-function to hash your passwords (passwords should never be stored in cleartext!)