Login Code

[ofSHIZ]

Hi, I've been wondering how to make a login script using MySQL

So Far here is the code I have made

<?php
session_start();  

$db = mysql_connect("localhost","hfwf") or mysql_die ("Unable to Connect to Mysql."); 
  mysql_select_db("hfwf_uk_db",$db);

$username = $_POST['username']; 
$password = $_POST['password']; 

if((!$username) || (!$password)){ 
    echo "Please enter ALL of the information! <br />"; 
    include 'index.php'; 
    exit(); 
}

$sql = mysql_query("SELECT * FROM news_login WHERE username='$username' AND password='$password'"); 
$login_check = mysql_num_rows($sql); 

if($login_check > 0){ 
    while($row = mysql_fetch_array($sql)){ 
    foreach( $row AS $key => $val ){ 
        $$key = stripslashes( $val ); 
    }

header("Location: addthenews.php"); 
    } 
} else { 
    echo "You could not be logged in! Either the username and password do not match or you have not validated your membership!<br /> 
    Please try again!<br />"; 
    include 'index.php'; 
}	


?>

For some reason it doesn't work, but i've inserted things in to my database.
Maybe someone can direct me to a link that can show me how to do this.
Thanks for your help

[fulco]

Try this website.

http://www.scriptschool.com/php/

[tdevlin]

I'm not sure exactly what your problem is, cept that you say it doesn't work. Your code looks alittle too long to handle such a small task, Below is a piece of the code I created to use for my login/password sites, you may take it and use it for your needs. Creating a login script is as simple as this...

session_start();

if($username && $password)
{
 //if the user has tried to log in

 $db_conn = mysql_connect("localhost","$dbuser","$dbpass");
 mysql_select_db("$dbname", $db_conn);
 $query = "select * from auth where username='$username' and password=password('$password')";
 $result = mysql_query($query, $db_conn);
 if (mysql_num_rows($result) > 0)
 {
 // if they are in the database register the user id
 $valid_user = $username;
 session_register("valid_user");
 }
 }

Somewhere down the login page we need to do error checking and etc... this is what I used

 if (session_is_registered("valid_user"))
 {
  //do something, they are valid and registered header location would go here.
 }
 else
 {
  if (isset($username))
	{
	 //if they've tried and failed to log in
	 echo "<h6>Could not log you in, check username and password</h6><br />";
	}
	else
	{
	 //they have not tried to log in yet or have logged out
	 echo "<h6>You are not logged in. <BR></h6><br />";
                 //here you can put your login form, simply ask for username and password.
	}
}

On the pages you wish ONLY the registered user to view, put this little bit of code

session_start();

if (!session_is_registered("valid_user"))
{

   //do something, this means the check failed and the user is not logged in..
}else{
 //do something, this is where you put the information a valid logged in user views
}

If this is not what you are asking for, please reply with alittle more information and I'll see if I can help you further.

Regards,
Tony Devlin