Login help

Radon3k

I have created the registration part just fine. Now I need to get the login part working. This is the code I have, but it doesn't work, just tells me the user name and/or password is invalid.

Any help is greatly appreciated, thanks! 🙂

<html>
<title></title>
<body>
<form method="post" action="<?PHP_SELF?>">
User Name: <input type="text" name="uname"><br>
Password: <input type="password" name="passwd"><br>
<input type="submit" name="submit" value="Submit">
<input type="hidden" name="beenSubmitted" value="true">

<?php
$db = mysql_connect("localhost", "DBUSERNAMEHERE", "DBPASSWORDHERE");
if(!$db) {
	echo("Could not establish a connection to the database server.");
	exit();
}

mysql_select_db("DBNAMEHERE", $db);
if(! @mysql_select_db("DBNAMEHERE") ) {
	echo("Could not establish a connection to the database.");
	exit();
}

if($beenSubmitted) {
	$dbuname = mysql_query("SELECT uname FROM admin");
	$dbpasswd = mysql_query("SELECT passwd FROM admin");

if($uname != $dbuname AND $passwd != $dbpasswd) {
	echo("You have entered an invalid user name and/or password. Please try again.");
} elseif ($uname = $dbuname AND $passwd = $dbpasswd) {
	header("/admin/index2.php");
}
}

milind24

Try this :

<html>
<title></title>
<body>
<form method="post" action="<?PHP_SELF?>">
User Name: <input type="text" name="uname"><br>
Password: <input type="password" name="passwd"><br>
<input type="submit" name="submit" value="Submit">
<input type="hidden" name="beenSubmitted" value="true">

<?php
$db = mysql_connect("localhost", "DBUSERNAMEHERE", "DBPASSWORDHERE");
if(!$db) 
{
    echo("Could not establish a connection to the database server.");
    exit();
}

mysql_select_db("DBNAMEHERE", $db);
if(! @mysql_select_db("DBNAMEHERE") ) 
{
    echo("Could not establish a connection to the database.");
    exit();
}

if($beenSubmitted) 
{
    $query = " select * from admin where dbuname != '$uname' AND dbpasswd != '$passwd' ";
    $result = mysql_query($query);
    if(!mysql_num_rows($result)) 
	{
        echo("You have entered an invalid user name and/or password. Please try again.");
    }
	else
	{
        header("Location:/admin/index2.php");
    }
}

Radon3k

Hi,

Thanks for the reply! 🙂 One thing, however, is in your code, $dbuname and $dbpasswd no longer exist. So that confuses me a bit. As you can see, I'm a PHP/MySQL newbie. Thanks for the help! 🙂

milind24

Hi ,

$dbuname and $dbpasswd are your admin table fields so don't give $ sign with that field in query

Radon3k

Hi,

No, uname and passwd are my db tables. As you can see in my first post, I declared $dbuname and $dbpasswd as a query to get the uname nad passwd.

milind24

hey ,

tell me your admin table field names for username and password

Radon3k

Hi,

There is one table called admin. In that table there are 3 fields; ID, uname, passwd.

milind24

hey then onlu change query statement as below

$query = " select * from admin where uname!= '$uname' AND passwd != '$passwd' ";

That means $ variables are your form variables

Radon3k

Hi,

I got a lot further with your code than mine, so thanks! 🙂

But I get this error:

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/currentp/public_html/test/index.php on line 26
You have entered an invalid user name and/or password. Please try again.

What does it mean? Thanks again for the help! 🙂

milind24

try using die statement check it is execute query properly

    print $query;
    $result = mysql_query($query) die(" unable to execute query");
    if(!mysql_num_rows($result)) 
    {
        echo("You have entered an invalid user name and/or password. Please try again.");
    }
    else
    {
        header("Location:/admin/index2.php");
    }

send me what output is coming

Radon3k

It returns this:

SELECT * FROM admin WEHRE uname != 'admin' AND passwd != 'test' unable to execute properly

Is there an easier way to do the login system? Thanks. 🙂

milind24

hey ,

that means query is not excuting properly : ok
Try this one ,

$query = " select * from admin where uname = '$uname' AND passwd = '$passwd' ";
    $result = mysql_query($query,$db) die(" unable to execute query");
    if(!mysql_num_rows($result)) 
    {
        echo("You have entered an invalid user name and/or password. Please try again.");
    }
    else
    {
        header("Location:/admin/index2.php");
    }

Radon3k

Hi,

Now everytime I type in the user name and password it returns with "You have entered an invalid user name and password."

Should I be approaching this in a different way?