Hey paul088, (Well anyone. :D)

[subkida]

I finally created a databse and made a table called members with my 2 members id, password and username.

When I tried to use your script I get these errors:

Warning: session_start() [function.session-start]: open(windows/temp\sess_0160462b3b8778510e3c14357cae7358, O_RDWR) failed: No such file or directory (2) in D:\Program Files\Apache Group\Apache2\htdocs\tests\password.php on line 45

Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at D:\Program Files\Apache Group\Apache2\htdocs\tests\password.php:45) in D:\Program Files\Apache Group\Apache2\htdocs\tests\password.php on line 45

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at D:\Program Files\Apache Group\Apache2\htdocs\tests\password.php:45) in D:\Program Files\Apache Group\Apache2\htdocs\tests\password.php on line 45

User Login

User Name

Password

Warning: Unknown(): open(windows/temp\sess_0160462b3b8778510e3c14357cae7358, O_RDWR) failed: No such file or directory (2) in Unknown on line 0

Warning: Unknown(): Failed to write session data (files). Please verify that the current setting of session.save_path is correct (windows/temp) in Unknown on line 0

Do you know why this might be occuring?

The form for logging in still shows up, but when I enter a username and password it just redirects me back to content.php(no variable) which is where I originally called the password.php from. Any suggestions?

[subkida]

<?php

if (isset($HTTP_POST_VARS[submit])) 
    {
include ("db.php");
if ($HTTP_POST_VARS[username] AND $HTTP_POST_VARS[password]) 
       {  Check the submitted info.

$query = "SELECT * FROM user_table WHERE username='$HTTP_POST_VARS[username]'";
$query_result = mysql_query ($query) or die (mysql_error());
$result = @mysql_fetch_array ($query_result);
if ($result[password]!="")
        {
if ($HTTP_POST_VARS[password] == $result[password]) 
                             {

// If a session already exist, destroy it

if(isset($_COOKIE[session_name()]))
                        {
session_start(); // To be able to use session_destroy
session_destroy(); // To delete the old session file
unset($_COOKIE[session_name()]);
                            }
session_start();
$_SESSION[username]=$result[username];

    } 
                    }

else {
$message = urlencode ("The username and password submitted do not match those on file. Please try again.");

header ("location: login.php?greeting=$message");
    }
    }
 else {
$message = urlencode ("Please enter your username and password to log in.");

header ("location: login.php?greeting=$message");

        }
exit;
         }
session_start();
if ($_SESSION[username]=="")
{

echo "<br><br><br><br><center><font size=+3 color=#B13D22>User Login</font><br><br><br>
 <table width=400 bgcolor=#eeeeee cellpadding=6 cellspacing=1>
    <form name=admin method=post action=$PHP_SELF>
       <TR> 
        <TD bgcolor=\"#ffffff\" align=\"right\"><font class=\"font14\">User Name</font></td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"text\" NAME=\"username\" SIZE=\"15\"></td></tr>
      <TR> 
        <TD bgcolor=\"#ffffff\" align=right><font class=font14>Password</font> </td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"password\" NAME=\"password\" SIZE=\"10\"></td></tr>
            <TR>
        <TD bgcolor=\"#ffffff\"></td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"SUBMIT\" NAME=\"submit\" VALUE=\"Log in\"></td></tr>
           </form>
    </TABLE>";
    echo "<p align=center><font color=red>$greeting</font></p>";//This prints the warning message.
}
else {

header ("location: index.php");}
    ?>

The only thing I changed was right there at the bottom where it says header ("location: index.php") I changed that to newpost.php because I figured that's where it redirected you if everything checkd out ok and I wanted it to redirect to newpost.php.

Thanks much guys!

[matt_4013]

This is a problem with your php.ini settings. There's a directive in there called session.save_path, you'll need to change that to your windows temp directory! 🙂

[subkida]

Lemme go try that!

Thanks!

[subkida]

I changed that to C:/windows/temp (it was originally just windows/temp). Now it gets rid of those errors but doesn't load password.php it just says this in the addy bar:

http://localhost:8080/tests/content.php?id=8

Any idea why it doesn't even load the password.php page now?

[paul088]

Sorry, just saw your post. Could you post your code here so that I could take a look?

[subkida]

<?php

if (isset($HTTP_POST_VARS[submit]))
    {
include ("db.php");
if ($HTTP_POST_VARS[username] AND $HTTP_POST_VARS[password])
{  //Check the submitted info.

$query = "SELECT * FROM user_table WHERE username='$HTTP_POST_VARS[username]'";
$query_result = mysql_query ($query) or die (mysql_error());
$result = @mysql_fetch_array ($query_result);
if ($result[password]!="")
        {
if ($HTTP_POST_VARS[password] == $result[password])
                             {

// If a session already exist, destroy it

if(isset($_COOKIE[session_name()]))
                        {
session_start(); // To be able to use session_destroy
session_destroy(); // To delete the old session file
unset($_COOKIE[session_name()]);
                            }
session_start();
$_SESSION[username]=$result[username];

    }
                    }

else {
$message = urlencode ("The username and password submitted do not match those on file. Please try again.");

header ("location: password.php?greeting=$message");
    }
    }
 else {
$message = urlencode ("Please enter your username and password to log in.");

header ("location: password.php?greeting=$message");

        }
exit;
         }
session_start();
if ($_SESSION[username]=="")
{

echo "<br><br><br><br><center><font size=+3 color=#B13D22>User Login</font><br><br><br>
 <table width=400 bgcolor=#eeeeee cellpadding=6 cellspacing=1>
    <form name=admin method=post action=$PHP_SELF>
       <TR>
        <TD bgcolor=\"#ffffff\" align=\"right\"><font class=\"font14\">User Name</font></td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"text\" NAME=\"username\" SIZE=\"15\"></td></tr>
      <TR>
        <TD bgcolor=\"#ffffff\" align=right><font class=font14>Password</font> </td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"password\" NAME=\"password\" SIZE=\"10\"></td></tr>
            <TR>
        <TD bgcolor=\"#ffffff\"></td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"SUBMIT\" NAME=\"submit\" VALUE=\"Log in\"></td></tr>
           </form>
    </TABLE>";
    echo "<p align=center><font color=red>$greeting</font></p>";//This prints the warning message.
}
else {

header ("location: newpost.php");}
?>

There. 😃

[paul088]

What is password.php mentioned above? To make it work, save the script as login.php, and have database set up, and the database connection db.php ready. The last two lines means: if the user is logged in (if ($_SESSION[username]!="")), go to newpost.php. This is useful when a user is logged in but accidentally came to this file (login.php). Thes two lines make sure the login form will now show to him.

[subkida]

Well password.php is the name of that file, so in theory by changing those to password.php it should still do the same thing right?

DB.php is setup and working, and the database is up.

So is there anything else i could be donig wrong, or is it imperative that the file is called login.php and I change those back to login.php?

[paul088]

Sorry, my mistake. Don't need to change the file name. I thought login.php was still there. Give me a minute to look over the code again.

[subkida]

This script logs people in then?

Being logged in isn't a requirement for getting to this page. I was trying to have it that as long as the password and username submitted matched the one in my members table of my database then you could access that page.

So maybe this script won't work for me after all. LOL!

[paul088]

I probably didn't make myself clear. People do not have to log in to access this page, but if they are logged in, they will be redirect to newpost.php if they accidentally come to this page (for example click on the url history links.

[subkida]

Oh I see. Cool cool. I thoguht maybe all this work was for nothing. Hehe.

[paul088]

There was an extra } in the code. This should do it. Let me know if it works for you.

<?php

if (isset($HTTP_POST_VARS['submit']))
    {
include ("db.php");
if ($HTTP_POST_VARS['username'] AND $HTTP_POST_VARS['password'])
{  //Check the submitted info.

$query = "SELECT * FROM user_table WHERE username='$HTTP_POST_VARS[username]'";
$query_result = mysql_query ($query) or die (mysql_error());
$result = @mysql_fetch_array ($query_result);
if ($result[password]!="")
        {
if ($HTTP_POST_VARS['password'] == $result['password'])
        {

// If a session already exist, destroy it

if(isset($_COOKIE[session_name()]))
                        {
session_start(); // To be able to use session_destroy
session_destroy(); // To delete the old session file
unset($_COOKIE[session_name()]);
                            }
session_start();
$_SESSION['username']=$result['username'];

    }

else {
$message = urlencode ("The username and password submitted do not match those on file. Please try again.");

header ("location: password.php?greeting=$message");
    }
    }
 else {
$message = urlencode ("Please enter your username and password to log in.");

header ("location: password.php?greeting=$message");

        }
exit;
         }
session_start();
if ($_SESSION[username]=="")
{

echo "<br><br><br><br><center><font size=+3 color=#B13D22>User Login</font><br><br><br>
 <table width=400 bgcolor=#eeeeee cellpadding=6 cellspacing=1>
    <form name=admin method=post action=$PHP_SELF>
       <TR>
        <TD bgcolor=\"#ffffff\" align=\"right\"><font class=\"font14\">User Name</font></td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"text\" NAME=\"username\" SIZE=\"15\"></td></tr>
      <TR>
        <TD bgcolor=\"#ffffff\" align=right><font class=font14>Password</font> </td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"password\" NAME=\"password\" SIZE=\"10\"></td></tr>
            <TR>
        <TD bgcolor=\"#ffffff\"></td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"SUBMIT\" NAME=\"submit\" VALUE=\"Log in\"></td></tr>
           </form>
    </TABLE>";
    echo "<p align=center><font color=red>$greeting</font></p>";//This prints the warning message.
}
else {

header ("location: newpost.php");}
?>

[subkida]

Same result, goes to the content.php?id=8 page and gives a blank screen, poop.

[paul088]

Why does it have anything to do with content.php?

[paul088]

Just save this script as password.php and run it. Don't complicate it by involving other files.

Also you might have saved the script while I was editing the post. Please copy and save it again.

I will check back with you later.

Good luck.

[subkida]

Duh, I wasn't thinking straight when I was trying to run it through another page.

Anyway new error when I just run password.php

Parse error: parse error, unexpected $end in D:\Program Files\Apache Group\Apache2\htdocs\tests\password.php on line 69

Line 69 consequently is the line after the ?>.

So what the heck? Heh.

[subkida]

Fixed that problem. It was missing the closing bracket from the very first If statement. Ok, so now it gives me blank screen. Nothing at all.

[paul088]

I tested this and it worked.

<?php
if (isset($HTTP_POST_VARS['submit']))
    {
include ("db.php");
if ($HTTP_POST_VARS['username'] AND $HTTP_POST_VARS['password'])
{  //Check the submitted info.

$query = "SELECT * FROM user_table WHERE username='$HTTP_POST_VARS[username]'";
$query_result = mysql_query ($query) or die (mysql_error());
$result = @mysql_fetch_array ($query_result);

if ($result[password]!="" AND $HTTP_POST_VARS['password'] == $result['password'])
        {

// If a session already exist, destroy it

if(isset($_COOKIE[session_name()]))
                        {
session_start(); // To be able to use session_destroy
session_destroy(); // To delete the old session file
unset($_COOKIE[session_name()]);
                            }
session_start();
$_SESSION['username']=$result['username'];

    }
else {
$message = urlencode ("The username and password submitted do not match those on file. Please try again.");
header ("location: password.php?greeting=$message");
    }
    }
 else {
$message = urlencode ("Please enter your username and password to log in.");

header ("location: password.php?greeting=$message");
exit;
            }
   				 }

session_start();
if ($_SESSION[username]=="")
{

echo "<br><br><br><br><center><font size=+3 color=#B13D22>User Login</font><br><br><br>
 <table width=400 bgcolor=#eeeeee cellpadding=6 cellspacing=1>
    <form name=admin method=post action=$PHP_SELF>
       <TR>
        <TD bgcolor=\"#ffffff\" align=\"right\"><font class=\"font14\">User Name</font></td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"text\" NAME=\"username\" SIZE=\"15\"></td></tr>
      <TR>
        <TD bgcolor=\"#ffffff\" align=right><font class=font14>Password</font> </td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"password\" NAME=\"password\" SIZE=\"10\"></td></tr>
            <TR>
        <TD bgcolor=\"#ffffff\"></td>
        <TD bgcolor=\"#ffffff\"><INPUT TYPE=\"SUBMIT\" NAME=\"submit\" VALUE=\"Log in\"></td></tr>
           </form>
    </TABLE>";
    echo "<p align=center><font color=red>$greeting</font></p>";//This prints the warning message.
}
else {
header ("location: newpost.php");}
?>