Simple MYSQL

FourthChapter

Hi all,

does any one know a simple script that will allow me to check a username against a password in a mysql database and if corrct include ./secure/index.php and if it is incorrect include ./denied.php

The login page is seperate and has 2 input boxes, Username and password

My current login script is:

<? if (($username == "User1") AND ($password == "Password")){
echo ("<A HREF=\"./secure/index.php"></A>");
}ELSE{
echo ("<A HREF=\"./denied.php\"></A>");
}
?>

And you can see it is utter rubbish, but im proud of myself, my first proper PHP script! lol

As you can tell i am VERY new to php, and i need to learn more for MYSQL/PHP!

Thanks so much in advance

Matt

rIkLuNd

This is how I do it:

<?php

// this is my 'login.php' file

// mysql connection

$check = mysql_query("select * from users where username='".$username."' 
and password='".$password."'");

$exists = mysql_num_rows($check);

if($exists == 1)
{
header("Location: secure/index.php");
}
else
{
header("Location: denied.php");
}

?>

FourthChapter

Thanks

Can you tell me how to connect to a MYSQL server and do i need to edit any part of your script? (how do i tell it what the table is called/what the names of the table headers are?)

Also is it possible to encrypt the password using MD5, and how would i do this?

Im only a beginner, but im learing!
thx very much

Matt

FourthChapter

I have kind of figured it out, well the first bit, i treid the following but it doesnt work:

<?php

$mysql_access = mysql_connect("localhost", "username" , "password");
mysql_select_db("databasename");


$check = mysql_query("select * from `tablename` where users='".$username."' 
and password='".$password."'");

$exists = mysql_num_rows($check);

if($exists == 1)
{
header("Location: secure/index.php");
}
else
{
header("Location: denied.php");
}

?>

whats wrong? I get the following messages:

Warning: Supplied argument is not a valid MySQL result resource in /homepages/verify.php on line 10

Warning: Cannot add header information - headers already sent by (output started at /homepages/verify.php:10) in /homepages/verify.php on line 18

Thanks very much

Matt
(my php knowlage has just doubled!)

rIkLuNd

the "headers already sent..." thingy is because you have some html output before your <?php tag, and the other thing must depend on something else... maybe your username field isn't named 'username', or if register globals is off, you will have to use $POST['username'] (or $GET['username']).