Username and password check

chinni_77

Hello,

i am trying to implement user name and password check from my table and if they match, the user will be redirected to main.php else he stays over there.
I worked with a simple two textboxes to enter user name and password and then with a submt button.It was working fine.Now, i implemented the same code to my complicated log in page, it is'nt working.could somebody pls tell me where is the error?

<?php

include "dbconnection.inc";
include "main_functions.inc";
$p_main = new main_functions;

if ($language_f != "")
$p_main->set_system_language($language_f);
$p_main->get_language_phrases('LOGIN');

$sql = "SELECT count(*) as cnt from TBL_USER WHERE USER_NAME = '$sess_user_f' AND USER_PASSWORD = '$sess_pass_f'";
$result = ibase_query($sql);
$row = ibase_fetch_row($result);
if ($row[0]) {
header('Location: main.php');
exit;
} else {
echo"<form action=\"$PHP_SELF\" method=\"POST\">\n";

}

<head><title>Login</title>
<link rel="stylesheet" type="text/css" href="formate.css">
</head>
<body>
<form method="post">
<table width="100%" height="100%" border="2">
<tr>
<td>
<center>
<table bgcolor="#E0E0E0" border="2">
<tr>
<td>
<table bgcolor="#E0E0E0" width="320">
<tr height="23" width="100%">
<td background="images/img_title.gif"><b><font color="#FFFFFF">
<?php
echo "{$p_main->a_system_textphrases_m[TXT_LOGIN]}";
?>

</b></font></td>
</tr><tr>
<td align="right">

<?php

echo ("
<a href =\"index.php?language_f=ENG\" target=\"_self\">
<img src=\"images/ban_english.gif\" alt=\"{$p_main->a_system_textphrases_m[TXT_SETENGLISH]}\" name=\"btn_gersel\" width=\"46\" height=\"25\" border=\"0\">
</a>");

echo ("<a href =\"index.php?language_f=SPA\" target=\"_self\">
<img src=\"images/ban_spanish.gif\" alt=\"{$p_main->a_system_textphrases_m[TXT_SETSPANISH]}\" width=\"46\" height=\"25\" border=\"0\">
</a>");

echo ("<a href =\"index.php?language_f=FRE\" target=\"_self\">
<img src=\"images/ban_french.gif\" alt=\"{$p_main->a_system_textphrases_m[TXT_SETFRENCH]}\" width=\"46\" height=\"25\" border=\"0\">
</a>");
?>
</td></tr><tr><td>

<?php
echo "{$p_main->a_system_textphrases_m[TXT_INTRO]}";
?>

</table>

<table bgcolor="#E0E0E0" width="320">
<tr>
<td>
<?php
echo "{$p_main->a_system_textphrases_m[TXT_USERNAME]}";
?>
</td>
<td align="right"><input type="text" name="sess_user_f" value="" maxlength="99" size="25"></td>
</tr>
<tr>
<td>
<?php
echo "{$p_main->a_system_textphrases_m[TXT_PASSWORD]}";
?>
</td>
<td align="right"><input type="password" name="sess_pass_f" maxlength="255" size="25"></td>
</tr><input type="hidden" value="1" name="login_try">
</table>
<div align="center">
<br>
<table>
<tr>
<td><input type="submit" value="Log in" style="position: relative; width: 150;"></td>
</form><form method="post">
<td><input type="submit" value="Change password" style="position: relative; width: 150;"></td>
<input type="hidden" value="1" name="login_changepass">
</tr></form>
</table>
</div>
</td>
</tr>
</table>
</center>
</td>
</tr>
</table>
</form>
</body></html>

malbera

Do you get any error?
try to use php syntax highlighting, it will be much easier for the others to read your code

Weedpacket

Well I'm not sure what this bit's supposed to be doing:

if ($row[0]) {
header('Location: main.php');
exit;
} else {
echo"<form action=\"$PHP_SELF\" method=\"POST\">\n";

}

Why the echo?

chinni_77

OK, here it goes. the following code will generate a log in page and checks for the user name and password and if they match to the values in the table then, main.php is shown.I'm using the same code but with some additional stuff like images and so on....My previous code is'nt working, i think the problem in transferring the else condition.Hope somebody would assist me .

Thanks any way

<?php
include "dbconnection.ini";

$sql = "SELECT count(*) as cnt from TBL_USER WHERE USER_NAME = '$user' AND USER_PASSWORD = '$pass'";
$result = ibase_query($sql);
$row = ibase_fetch_row($result);
if ($row[0]) {
header('Location: main.php');
exit;
} else {
echo"<form action=\"$PHP_SELF\" method=\"POST\">\n";
echo"<input type=\"text\" name=\"user\" size=\"13\"><br>\n";
echo"<input type=\"password\" name=\"pass\" size=\"13\"><br>\n";
echo"<input type=\"submit\" value=\"verify\">";
echo"</form>";
}
?>

Weedpacket

Originally posted by chinni_77
...

} else {
    echo"<form action=\"$PHP_SELF\" method=\"POST\">\n";
echo"<input type=\"text\" name=\"user\" size=\"13\"><br>\n";
echo"<input type=\"password\" name=\"pass\" size=\"13\"><br>\n";
echo"<input type=\"submit\" value=\"verify\">";
echo"</form>";
}

[/B]

The problem is that this is going into your page above the <head> tag. You might consider writing an entire HTML page from <html> to </html> here, and then exit().

Of course, then nothing after the closing } there will ever be seen.

All you really need to do is check if they're trying to log in. If they are, check them off against the database. If that succeeds, redirect them and exit(). After that, just put the HTML for the login page.

if($_POST['user']!='')
{   //Attempt to log in
    include 'dbconnection.ini';
    $sql=/*etc. etc.,
    etc., */
    if($row[0])
    {   header('Location: main.php');
        exit();
    }
}
?>
<html>
.....login page
</html>

chinni_77

Of course, thatz what i've presented in my second post.

will that does'nt work with my first post by just transferring the else statement rather than changing all my code.I just wonder if itz possible:-/

thanks any way