session issues

[PaulaRun]

Can somebody tell me what I'm doing wrong?? I keep getting Could not log you in. I know I'm connecting to the db and when I do the query on my server, it works. I have echo'ed the query result and get "resource id #3". what does that mean? I'm sure it is something stupid...

Thanks for any help in this!

<script language="php">
session_start();

if ($userid && $password)
{
// if the user has just tried to log in

$db_conn = mysql_connect("localhost", "localhost", "pswd") or die ('I cannot connect to the database because: ' . mysql_error());

mysql_select_db("dbname", $db_conn);

$query = "select * from auth "
."where name='$userid' "
." and pass=password('$password')";
$result = mysql_query($query, $db_conn);

if (mysql_num_rows($result) >0 )
{
// if they are in the database register the user id
$valid_user = $userid;
session_register("valid_user");
}
}
</script>

//in the body of the html...

<script language="php">

if (session_is_registered("valid_user"))
{
echo "You are logged in as: $valid_user <br>";
echo "<a href=\"logout.htm\">Log out</a><br>";
}
else
{
if (isset($userid))
{
// tried and failed to log in
echo "Could not log you in";
echo $userid;
}
else
{
// not tried to log in yet or have logged out
echo "You are not logged in.<br>";
}

// provide form to log in 
echo "<form method=post action=\"auth.htm\">";
echo "<table>";
echo "<tr><td>Userid:</td>";
echo "<td><input type=text name=userid></td></tr>";
echo "<tr><td>Password:</td>";
echo "<td><input type=password name=password></td></tr>";
echo "<tr><td colspan=2 align=center>";
echo "<input type=submit value=\"Log in\"></td></tr>";
echo "</table></form>";

}

</script>

[ftrudeau]

It is not possible to echo a result identifier.
That is why you get 'result ID #xx'.
In order to get valid 'data' from a result ID, you must use mysql function on it, like mysql_fetch_row, or mysql_fetch_array. Try that on your piece of code that is trying to get that data from your database.

...
$query = "select * from auth " 
."where name='$userid' " 
." and pass=password('$password')"; 
$result = mysql_query($query, $db_conn); 

while ($row = mysql_fetch_row($result)) {
     echo $row[0] . "<br>";
     echo $row[1] . "<br>";
     echo $row[2] . "<br>";
     echo $row[3] . "<br>";
     ...
}
[...]

See then what you get.
The problem lies elsewhere, me thinks.

Also, always test every query to a DB.

Ex :

$result = mysql_query($query, $db_conn);

Instead, you should have :

if(!$result = mysql_query($query, $db_conn)) {
   echo "MySQL error ! Server said :" . mysql_error() . "<br>";
}

Get the idea ?

Hope this helps

[PaulaRun]

Thanks for the suggestions. I don't get an error when I check the query, but nothing is displayed when I echo the db contents.

I echo the user and password so I know they are correct (and match the database) but it seems like nothing is happening with the query!

[ftrudeau]

Then please tell us how exactly are you displaying the DB content.

[PaulaRun]

Turns out I didn't insert the passwords into the database correctly using the password() function. That is why the query didn't match the password.