Login

[Platoon_Leader]

I have made the following login script but I need to know how to make it check if the if the passowrd you enter matchs that against the one in the database against the username selected, and if it does not it does not allow you to go to the useredit.php file.

<?php
require('variables.php');
require('variablesdb.php');
require('meta.php');
require('header.php');
require('leftmenu.php');
require('main1.php');

echo '<form action="edituser.php" method="post">';
?>
<center>
    <table border="0" cellpadding="0" width="100%">
      <tr>
        <td width="12%">
        <p class="text"><font color="#FFFCC">Name:</font></p></td>
        <td width="88%"><select size="1" name="edituser" style="background-color: <?php echo"$color1" ?>; border: 1 solid <?php echo"$color3" ?>" class="text">

<?php
$sortby = "name ASC";
$sql="SELECT * FROM $playerstable ORDER BY $sortby";
$result=mysql_query($sql,$db);
$num = mysql_num_rows($result);
$cur = 1;
echo "<ol>";
while ($num >= $cur) {
$row = mysql_fetch_array($result);
$name = $row["name"];
?>
<option><?php echo "$name" ?></option>
<?php
$cur++;
} 
echo "</ol>";
?>
</select></td>
      </tr>
<tr>
        <td width="12%">
        <p class="text"><font color="#FFFCC">Password:</font></p></td>
        <td width="88%"><input type="password" name="passworduser" style="background-color: <?php echo"$color1" ?>; border: 1 solid <?php echo"$color3" ?>" class="text"></td>
        </tr>
    </table>
  </center>
<p>  <input type="Submit" name="submit1" value="Submit" style="background-color: <?php echo"$color1" ?>; border: 1 solid <?php echo"$color3" ?>" class="text">
  </form>
<?
require('main2.php');
require('footer.php');
?>

[cgraz]

Here's the logic behind it (atleast one of the many ways you can do it). Modify the code to suit your needs

$query = "SELECT count(*) from table where 
             name = '$name' and
             pass = '$password'";

$result = mysql_query($query);

$count = mysql_result($result, 0, 0);

if ($count > 0) {
   header("Location: useredit.php");
} else {
   echo "Combo is incorrect";
}

Cgraz

[Platoon_Leader]

Where would I enter that code in my script?

[cgraz]

well your form gets processed by edituser.php, so put it there. REmember to modify it to suit your needs. Particularly in the select query, the table name (table), field names in your db (name and pass), and the variables from the form ($name and $password).

Cgraz

[Platoon_Leader]

I have add the code but it's still not checking the passwords it just ignores them and displays the users info even if you don't enter a password.

<?php
require('variables.php');
require('variablesdb.php');
require('meta.php');
require('leftmenu.php');
require('main1.php');
require('header.php');

$db = mysql_connect($databaseserver, $databaseuser, $databasepass);
        mysql_select_db($databasename,$db);
$query = "SELECT count(*) FROM $playerstable WHERE name = '$name' and  passworddb = '$passworddb'";

$result = mysql_query($query);
$count = mysql_result($result, 0, 0);

if ($count > 0) {
   header("Location: useredit.php");
} else {
   echo "Combo is incorrect";
}

?>
<?php

if ($submit) {
  // process form
	$db = mysql_connect($databaseserver, $databaseuser, $databasepass);
        mysql_select_db($databasename,$db);

  $sql = "UPDATE $playerstable SET mail = '$mail', url = '$url', icq = '$icq', aim = '$aim', country = '$country' WHERE name='$edituser'";
  $result = mysql_query($sql);

  echo "Thank you! Information entered.<br><a href='$directory/index.php'>Return to Main</a>";
} else{



  // display form



?>
<?php
	$db = mysql_connect($databaseserver, $databaseuser, $databasepass);
        mysql_select_db($databasename,$db);

$sortby = "name ASC";
$sql="SELECT * FROM $playerstable WHERE name = '$edituser' ORDER BY $sortby";
$result=mysql_query($sql,$db);
$row = mysql_fetch_array($result);
$name = $row["name"];
$passworddb = $row["passworddb"];
$mail = $row["mail"];
$url = $row["url"];
$icq = $row["icq"]; 
$aim = $row["aim"];
$country = $row["country"];

?>
<form method="post" action="<?php echo $PHP_SELF?>">
<center>
    <table border="0" cellpadding="0" width="100%">
      <tr>
        <td width="12%"><br><b>General</b></td>
        <td width="88%">&nbsp;</td>
       </td>
      </tr>
      <tr>
      <td width="12%">
  Squad:</td>
        <td width="88%"><input type="Text" name="name" value="<?php echo "$name" ?>"></td>
      </tr>
      <tr>
      <td width="12%">
  Passowrd:</td>
        <td width="88%"><input type="Text" name="passworddb" value="<?php echo "$passworddb" ?>"></td>
      </tr>
      <tr>
        <td width="12%">
  Mail:</td>
        <td width="88%"><input type="Text" name="mail" value="<?php echo "$mail" ?>"></td>
      </tr>
      <tr>
        <td width="12%">
   Url:</td>
        <td width="88%"><input type="Text" name="url" value="<?php echo "$url" ?>"></td>
      </tr>
      <tr>
        <td width="12%">
  ICQ:</td>
        <td width="88%"><input type="Text" name="icq" value="<?php echo "$icq" ?>"></td>
      </tr>
      <tr>
        <td width="12%">
  Aim:</td>
        <td width="88%"><input type="Text" name="aim" value="<?php echo "$aim" ?>"></td>
      </tr>
<tr>
        <td width="12%">
  Country:</td>
        <td width="88%"><select size="1" name="country">
        <option selected><?php echo "$country" ?></option>
  	<option>No country</option>
        <option>Argentina</option>
    	<option>Australia</option>
    	<option>Austria</option>
    	<option>Belgium</option>
        <option>Bosnia</option>
    	<option>Brazil</option>
    	<option>Bulgaria</option>
    	<option>Canada</option>
    	<option>Chile</option>
    	<option>Croatia</option>
    	<option>Cyprus</option>
    	<option>Czechoslavakia</option>
    	<option>Denmark</option>
    	<option>England</option>
    	<option>Finland</option>
    	<option>France</option>
    	<option>Georgia</option>
    	<option>Germany</option>
    	<option>Greece</option>
    	<option>Holland</option>
    	<option>Hong Kong</option>
    	<option>Hungary</option>
    	<option>Iceland</option>
    	<option>India</option>
    	<option>Indonesia</option>
    	<option>Iran</option>
    	<option>Iraq</option>
    	<option>Ireland</option>
    	<option>Israel</option>
    	<option>Italy</option>
    	<option>Japan</option>
    	<option>Leichenstein</option>
    	<option>Luxembourg</option>
    	<option>Malaysia</option>
    	<option>Malta</option>
    	<option>Mexico</option>
    	<option>Morocco</option>
    	<option>New Zealand</option>
    	<option>North Vietnam</option>
    	<option>Norway</option>
    	<option>Poland</option>
    	<option>Portugal</option>
    	<option>Puerto Rico</option>
    	<option>Qatar</option>
    	<option>Rumania</option>
    	<option>Russia</option>
    	<option>Scotland</option>
    	<option>Singapore</option>
    	<option>South Africa</option>
    	<option>Spain</option>
    	<option>Sweden</option>
    	<option>Switzerland</option>
    	<option>Turkey</option>
    	<option>United Kingdom</option>
    	<option>United States</option>
  	  </select></td>
      </tr>
    </table>
  </center>

<p>  <input type="Submit" name="submit" value="Enter information">

  </form>
<?php
}
?>

[cgraz]

shouldn't you place that code within this if. . .?

if ($submit) {
// process form

Cgraz