Anybody here who can tell me what is wrong with this...

zaniam

<!doctype html public "-//w3c//dtd html 3.2//en">

<html>
<head>
<title>Check login</title>
<meta name="GENERATOR" content="Arachnophilia 4.0">
<meta name="FORMATTER" content="Arachnophilia 4.0">
<?php
function mysql_die($error = "unknown")
{
echo "<H1>Error:". $error."</H1>";
exit;
}
$db = mysql_connect("localhost","username","password") or mysql_die("Unable to connect");
mysql_select_db("username_uk_db",$db);
$requete = "SELECT * FROM Users WHERE Username = UserName";
$result = mysql_query ($requete,$db)or mysql_die("No record");
$article =mysql_fetch_object($result);
mysql_free_result($result);
?>

</head>

<body>
<?php
if ($article->Password == $password) {
Header("Location:/users.php?username=$username");
} else {
Header("Location:/badlogin2.html");

}

</body>

</html>

Thank you so much! :p

jernhenrik

$result = mysql_query ($requete,$db)or mysql_die("No record");
should be->
$result = mysql_query ($requete) or ...etc.

thats the syntax terror i found!

hth

psy

ok, im guessing the main point is to check username/pw against a db? if so this should work:

<?
if($_POST['submit'])
{
 mysql_connect(connection shit) or die("connection failed.");
 mysql_select_db(db) or die("db selection failed.");
 $query="SELECT * FROM Users WHERE Username=$_POST['username'] LIMIT 1";
 $r=ql_query($query) or die("query failed.");
 if($r && mysql_num_rows>0)
   $data=mysql_fetch_array($r);
 else
   die("Error with db."); 

  $user=$_POST['username'];
  $pass=$_POST['password'];
  if($user==$data['user'] && md5($pass)==$data['pass'])
   header("Location:successful_login_page");
  else
   header("bad_login_page");

}else{ // no post variables -> build form //
?>
<form action=<?=$PHP_SELF?> method=post>
Username: <input type=text name=username><br>
Password: <input type=password name=password><br>
<input type=submit name=submit value=" Login "><br>
<?
} // eof //
?>

that will work if:
db = Users
db_user_title=user
db_user_pass=pass
db_pass is saved with md5 encryption..

let me know how that works (it might have some parse errors cause i just did it here, but you get the general idea right?)