Need a little help plez

newproxy

hi everone and welcome me to the forums

am making a program in vb and am not good at php a bit.
here what am trying to do:
the user enter their user and pass,
if the user name is admin and the pass is admin then print welcome ,
and if the username and pass is admin1 then print hi
but if the login is incorrect then i want to print Bye

i tried coding it ,but i get errors, someone plez help em with this

<?
if($user == "admin"){
if($pass == "admin"){
echo "welcome";
}
}elseif($user == "admin1"){
if($pass == "admin1"){
echo "hi";
}
}else
echo "bye";
}
?>

thanks

viper21634

<?
if($user == "admin" & $pass == "admin")
{
echo "welcome";
}
elseif($user == "admin1" & $pass == "admin1")
{
echo "hi";
}
else
{
echo "bye";
}
?>

I think that that is correct, give it a try

Mark

heres how i did it, but it does the same thing 🙂

<?
if($user == "admin" & $pass == "admin")
echo "Welcome!";
else
if($user == "admin1" & $pass == "admin1")
echo "Hi!";
else
echo "LEAVE";
?>

Mark

if you dont want the variables to show up in the url, then just use a form with POST like this:

FORM PAGE:

<form action="test.php" method="post">
User:<input type="text" name="user"><br>
Password:<input type="text" name="pass"><br>
<input type="submit" name="Submit" value="Login">
</form>

<?
if($user == "admin" & $pass == "admin")
echo "Welcome!";
else
if($user == "admin1" & $pass == "admin1")
echo "Hi!";
else
echo "You have enter the wrong name/password, plz try again";
?>

newproxy

thanks guy i got it to work but i have a question

is this the safest way?
can someone hack into this?

viper21634

Sure they can, I mean in all of the examples we did above we are sending and reciving plain text, now you could go to a SSL connection for it and that would be the better way to do it. May I ask, what are using this for?? and what level of security are you looking for??

ab4net

Dear , i think its not that safe,
the best way to use the HTTP_ACCESS

VIA the webserver configuration, i mean to protect the webfolder ..

viper21634

that would only protect the folder, we need to protect the data being sent across the net, the only way that I have seen to do that is to either encrypt the data on your script, or go into SSL mode

ab4net

ya thats right, i agree ...
the Secuse Socket Layer ... SSL
is the best way ...

but if dont want to pay, for a ssl, u can use the encription functions ..

viper21634

That is VERY true, SSL can get damn spendy 😉 The cheapest way would be to use the encrypt, or if you know someone that has Cert Services set up(or the unix equiv) you can have them make you a key and cert, wont be from a trusted issuer, but what the hey, it is free

newproxy

Originally posted by viper21634
Sure they can, I mean in all of the examples we did above we are sending and reciving plain text, now you could go to a SSL connection for it and that would be the better way to do it. May I ask, what are using this for?? and what level of security are you looking for??

you see am making this program in Microsoft Visual Basic 6.0
and when the user logs in they should see their harddrive number on the site and then the program will comfirm if the computer's hardrive # is same as the one the site. if it is it will load the rest of the program otherwise it will stay on the login screen.

                                                                   Thanks

newproxy

hi once again

i have faced another problem

i tried this code

 
if($user == "admin" & $pass == "admin")
{
echo "codeø2.&<s^;&c1"r<s^1"r-t2.&";
}
elseif($user == "admin1" & $pass == "admin1")
{
echo "hi";
}
else
{
echo "bye";
}
?>

codeø2.&<s^{;&c1"r<s^1"r-gt2.&} is the encoded data
but when it runs i get this error
Parse error: parse error, expecting ','' or';'' in /home/freehost/t35.com/b/u/bulk-network/login.php on line 4

anyhelp plez thanks

viper21634

on your first echo, try doing a print, with out the quotes. Also, why are you using php to interface with you app, write a DCOM dll in vb and stick it on your server.

newproxy

hi am i am in a hurry

ok for some reason

<?
if($user == "admin" & $pass == "admin")
{
Print codeø2.&<s^;&c1"r<s^1"r-t2.&;
}
elseif($user == "admin1" & $pass == "admin1")
{
echo "hi";
}
else
{
echo "bye";
}
?>

isn't working, i even tried using (" on both sides but it still woldn't work. someone please help me.

p.s: sorry about my bad english :[

viper21634

what on earth are you trying to print with that anyway??? where is it getting its info to print?

newproxy

ok i will explain everything step by step of what am trying to get it to do

first of all i want to tell you that am working on a program in Microsoft Visual Basic 6.0(windows programming lauaguage)
theres a picture of the login screen below fo thte program am working on.

second, when the user enter their username and pass, the program will open a url such as http://www.myiste.com/cgi-bin/login.php?user=admin&pass=admin in winsock.

then winsock will get data from the server. if the username and pass is admin then the web page will display codeø2.&<s^;&c1
"r<s^{1"r-t2.&.(this} is a encoded harddrive number)

then my program will decode the harddrive number and will confirm it with the user's computer harddrive number, who entered the login infor. If the the hd doesn't match this it will ask for the user to enter the login info again. If the hardrive is same as the one on the site, then it will load rest of the program.

thats about it

thanks

viper21634

now the decoding will take place in your VP app correct? Now just wondering, your app will parse the info off of the page? or will a var do? the encoded string cant be printed, but if you set it into a var it takes the data and prints it back out just fine

$var1 = 'codeø2.&<s^;&c1"r<s^1"r-t2.&';
print $var1;

try that see if it helps

newproxy

yes the program will decode the data.
thanks for the help guys, i'll let you know if i need more help. :-D

Mark

Originally posted by viper21634
on your first echo, try doing a print, with out the quotes. Also, why are you using php to interface with you app, write a DCOM dll in vb and stick it on your server.

write a who with the what now? lol