User Login Authentication ASP to PHP conversion?

[toddg]

Hello:

I am trying to convert some code a friend wrote in ASP to PHP to use for myself.

I am using mySQL as the table and have the usrName and usrPassword stored in there.

I am not sure about the md5() Is there a way to convert the passwords I already have stored in the table?

Anyway, can someone help me translate this?

Validate from form input:

If objRS.EOF Then
Session("Validated")="0"
Response.Redirect "sorry.html"
Else
Session("Validated")="0"
Response.Redirect "index.html"

End If

And then on each page to be protected using this:

If Session("Validated")<>"1" Then
Response.Redirect "../../login.html"

End If

Any ideas? I basically just need a quick page to check the form data against the DB and then set a session variable that will expire (preferably after 15min or whatever) then on each page to be protected check for the session variable and either allow or redirect.

Any help would be greatly appreciated, Thanks in advance!

Todd

[tshafer]

being an ex-asp programmer, this is easy 🙂

can't help ya' with the md5(), but as for the asp to php stuff:

<?php

/*
    First Example:

If objRS.EOF Then 
Session("Validated")="0" 
Response.Redirect "sorry.html" 
Else 
Session("Validated")="0" 
Response.Redirect "index.html" 
End If 

Becomes:
*/

sesion_start();
$sql = /*Your SQL Code Here*/;
$query = mysql_query($sql) or 
    die("<b>Error " . mysql_errno() . " : </b>" . 
        mysql_error() . "<br />\n");

$logged_in = "no";
session_register("logged_in");

if ($mysql_num_rows($query) != 1) { 
    $_SESSION["logged_in"] = "no";
    header("Location: ./my-error-page.html");
    exit();
} else { 
    $_SESSION["logged_in"] = "yes";
    header("Location: ./my-correct-login-page.html");
    exit();
}

/*
    Second example:

If Session("Validated")<>"1" Then 
Response.Redirect "../../login.html" 
End If 

Becomes:   
*/

session_start();
if ((!isset($_SESSION["logged_in"])) || ($_SESSION["logged_in"] != "yes")) { 
    header("Location: ./my-login-page.php");
    exit();
}

?>

[toddg]

but I am getting an T_string error. Any ideas? My sql query looks like this.

$sql_text = "SELECT * FROM users WHERE usrName=".$UsrName." AND usrPassword=".$Pswd.";

$query=mysql_query($sql_text) or die (mysql_error ());

Thanks

Todd

[tshafer]

first, you have a "_" in front of your mysql_query() function. Try this as you sql statement & query.

<?php

/* 
    You said:

$sql_text = "SELECT * FROM users WHERE usrName=".$UsrName." AND usrPassword=".$Pswd."; 
$query_=_mysql_query($sql_text) or die (mysql_error ()); 

Try this:

*/

$sql_text = "SELECT * FROM users WHERE usrName = '$UsrName' " . 
            "and usrPassword = '$Pswd'";
$query_ = mysql_query($sql_text) or die(mysql_error());

?>

[toddg]

Tom:
Thank you so much for your help. As far as the "_" go, I am not sure why they keep showing up in my code when I post...weird text editor I guess.

Anyway, I made that change and I am now getting another error to an undefined function:

Fatal error: Call to undefined function: () in /public_html/validate.php on line 18

my code currently looks like this:

<?php
Session_start();

// Connects to sql server and logs in with username and password  

$db connect here

// Selects all of the data from database 

$sql_text = "SELECT * FROM users WHERE usrName = '$formUsername' AND password = '$formPassword'";

$query = mysql_query($sql_text) or die (mysql_error ());

$logged_in = "no";
session_register("logged_in");

if ($mysql_num_rows($query) != 1) {
$SESSION["logged_in"] = "no";
header("Location: ./sorry.html");
exit();
}
else {
$SESSION["logged_in"] = "yes";
header("Location: ./family/index.html");
exit();
}

?>

What do you think??

Thanks again!

Todd

[tshafer]

you have "mysql_error ()" (Space between parentheses)

try "mysql_error()" (no space)