A complex login system!

zingbats

I am creating a login system whereby you select a "clan" from a drop down menu and you enter a username and password (MD5 encrypted).

THe table looks like this:

username | Password | clan | user_status |

I need the process script to look like this (it has some english in because I am not fluent in PHP!!!!)


--connection stuff--

$query = "SELECT * from clan_members WHERE username = '$username' AND password = md5('$password')";

--result stuff-- ($foo etc)

$user_status=$foo['user_status'];
$db_clan=$foo['clan']; (etc)

If $user_status = "admin" AND if $clan_name_that_they_selected_in_the_form /*drop down menu */ = $db_clan;

include "The page"

I know I have forgotten the elses.... but I want it to work like a logic gate... both the user_status AND the selected clan MUST match that in the database.

I hope you understand..
Alex.

leatherback

Hi,

Nice story. Now.. What is the question?

J.?

hermand

Like this?

FORM------

"SELECT DISTINCT FROM members"
//results into a drop down and some uname & pword boxes

CHECK----

SELECT * FROM members WHERE uname='$form_uname' AND pword='$form_pword' AND clan='$form_clan'

etc.

zingbats

I have made the script. I now need to know how to make it so that a page is included IF both the 'if's return true. So.. combine them in to one if

<?php
    /* Connecting, selecting database */
    $link = mysql_connect("localhost", "zingbats", "my pwl")
        or die("Could not connect");
    mysql_select_db("tycooneden_com") or die("Could not select database");

$query = "SELECT * FROM clan_members WHERE username = '$form_username' AND password = md5('$form_password') AND clan = '$form_clan'";
$result = mysql_query($query) or die("Query failed");
$foo=mysql_fetch_array($result);

/* Start the clan defining */

$username=$foo['username'];
$clan=$foo['clan'];
$user_level=$foo['user_level'];

mysql_close($link);
?>

<?
if ($form_clan = '$clan') {
print "Yay! The details match";
} else {
print "sorry, they don't match";
}
?>

<br><br>

<?
if ($user_level = 'admin') {
print "yeah, you are an $user_level!!!";
} else {
print "sorry, you are not an admin, you are a $user_level";
}
?>

leatherback

Hi,

Not 100% sure, but I think this should solve your problem:

After your $result statement:

$numrows =@ mysql_num_rows($result);

if ($numrows GT 0)
  {
include $page;
} 
else
{
echo "You are not authorized to acces this page";
}

zingbats

And what exactly does this do?

I want the two if to be combined. So they only enter IF the clan they have selected matches the clan in the DB and if they are have an admin status!

stolzyboy

<?
if ($form_clan = '$clan' && $user_level = 'admin') {
print "Yay! The details match";
} else {
print "sorry, they don't match";
}
?>

leatherback

Sorry, forgot that last bit. How about this!?


$query = "SELECT user_level FROM clan_members WHERE username = '$form_username' AND password = md5('$form_password') AND clan = '$form_clan'";
    $result = mysql_query($query) or die("Query failed");

while $row = mysql_fetch_array($result)
{
  if ($row[user_level] ==  'admin')
{
// include $page
} 
else
{
echo "You are not authorized to acces this page";
}
}

stolzyboy

that should work zingbats except this line

while $row = mysql_fetch_array($result)

should be

while ($row = mysql_fetch_array($result))

leatherback


if (time GT 2300 && $ME == tired)
{
$output = typos
}
else
{
echo "I have no clue what I am typing";
}

echo "stolzyboy == absolutely_right";

:eek:

stolzyboy

lol, too bad we can't all be perfect huh, i make silly mistakes like that, but only after many hours of coding and when my monitor starts looking like a foreign object and i start talking in different languages that i didn't even know i knew, well hopefully zingbats is trying your suggestions

leatherback

Haha,

Well, I suppose.. I am already coding the whole day: Started this morning at 9 am at work, writing code for Remote Sensing appl. and when I got home at 6.30 pm I started coding straight away again. Now it is 11.15pm here in NL. eehh. I suppose I need to get some sleep soon... (Or at least quit trying to help people with their problems..)

Cheers,

SOT-wolf

ok, i just made a post on how to make logins.

Could someone send me a quick tut on how to create one?

just simple login id and pw is all that is needed. I've been wanting to make one for years but i'm not experienced enough :rolleyes:

zingbats

This is not an advertisement post. Please post a new thread if you wish to know how to make a simple login system.

Does ANYONE know the answer to MY question?