Custom Error Message

Jezz

The script below is designed to verify user logins. It takes the user input from a form and checks that the username and password are valid. If they are not the form, (show_login.html) is reloaded. When this occurrs I would like an error message to be displayed on the form, like "bad login try again" etc. I have tried all sorts to do this but can't get anywhere, does anybody know any code I can insert into the script below to add an error message when the form is reloaded?

Any help would be much appreciated.

if ((!$POST[username]) || (!$POST[password])) {
header("Location: http://127.0.0.1/show_login.html");
exit;
}

$db_name = "test";
$table_name = "user";

$connection = @mysql_connect("*****", "", "*****")
or die(mysql_error());

$db = @mysql_select_db($db_name, $connection) or die(mysql_error());

$sql = "SELECT * FROM $table_name WHERE username = '$_POST[username]' AND password = password('$_POST[password]')";

$result = @mysql_query($sql,$connection) or die(mysql_error());

$num = mysql_num_rows($result);

if ($num != 0) {
$msg = "Welcome: $_POST[username]";

} else {
header("Location: http://127.0.0.1/show_login.html");
exit;
}

<HTML>
<HEAD>
<TITLE>welcome</TITLE>
</HEAD>
<BODY>
<? echo "$msg"; ?>
</BODY>
</HTML>

LordShryku

Set some varialbes for messages on your page:

<?
if($a==1) {
echo "WRONG!";
}

When you redirect them, do it to page.html?a=NUMBER

Jezz

K, I've tried that and it still don't work, hear is the modded code, have I stuck it in the right place?

if($a==1) {
echo "WRONG!";
}

if ((!$POST[username]) || (!$POST[password])) {
header("Location: http://127.0.0.1/show_login.html");
exit;
}

$db_name = "dresserDB";
$table_name = "user";

$connection = @mysql_connect("localhost", "jezz", "firework")
or die(mysql_error());

$db = @mysql_select_db($db_name, $connection) or die(mysql_error());

$sql = "SELECT * FROM $table_name WHERE username = '$_POST[username]' AND password = password('$_POST[password]')";

$result = @mysql_query($sql,$connection) or die(mysql_error());

$num = mysql_num_rows($result);

if ($num != 0) {
$msg = "Welcome to Dresser Xtra's: $_POST[username]";

} else {
header("Location: http://127.0.0.1/show_login.html?a=NUMBER");
exit;
}

LordShryku

I would put the variable on your login page, since that is where they will be redirected. Change it from show_login.html to show_login.php, so your php code will work

show_login.php ->

<?
//if no a variable, do this
if(!$a) {
$message = "";
}
//if redirected and a equals 1, do this
if($a == 1) {
$message = "Wrong Username or password";
}
//if redirected and a equals 2, do this
if($a == 2) {
$message = "You are not authorized to be on this page";
}
echo $message;
[Rest of Page]

Then, based on your circumstance, set your header tags as
header("Location: http://127.0.0.1/show_login.php?a=1");
Or
header("Location: http://127.0.0.1/show_login?a=2");
And so forth