Login Script Problems, not recognising data entered

olly2111

Hi all,
I have been workin on a login script for my website for a while and ive almost finished. The problem is that when i try to login, even though i fill the boxes up with text it still says:
Please enter ALL of the information!
The following is the checkuser.php file and below that is the login.html file

<?
/* Check User Script */
session_start();  // Start Session

include 'db.php';
// Conver to simple variables
$username = $_POST['username'];
$password = $_POST['password'];

if ((!$username) || (!$password)) {
  	echo "Please enter ALL of the information! <br />";
  	include 'login.html';
  	exit();
}

// check if the user info validates the db
$sql = mysql_query("SELECT * FROM tbl_member WHERE username='$username' AND password='$password' AND activated='1'");
$login_check = mysql_num_rows($sql);

if ($login_check > 0){
	while($row = mysql_fetch_array($sql)) {
  	foreach( $row AS $key => $val ) {
    		$$key = stripslashes( $val );
    	}
    		// Register some session variables!

		$_SESSION['username'] = $username;  		

		$_SESSION['user_level'] = $user_level;

		mysql_query("UPDATE tbl_members SET last_login=now() WHERE userid='$userid'");

		$_SESSION['loged'] = "yes";
  		header("Location: main.php");
  }
}
else {
  	echo "You could not be logged in! Either the username and password do not match or you have not validated your membership!<br />
  	Please try again!<br />";
  	include 'login.html';
}
?>

<body onload="parent.topFrame.location.href=('top.php')" bgcolor="#000000" text="#FFFFFF" link="#FFFFFF" vlink="#FFFFFF" alink="#FFFFFF">
<form action="checkuser.php" method="post" name="" id="">
  <table width="40%" border="0" align="center" cellpadding="4" cellspacing="0" bgcolor="#333333">
    <tr bgcolor="#000000"> 
      <td width="50%"><div align="center"><font size="2">Username:</font></div></td>
      <td width="50%"><div align="center"> 
          <input name="username" type="text" id="username" size="12">
        </div></td>
    </tr>
    <tr bgcolor="#000000"> 
      <td><div align="center"><font size="2">Password:</font></div></td>
      <td><div align="center"> 
          <input name="password" type="password" id="password" size="12">
        </div></td>
    </tr>
    <tr> 
      <td bgcolor="#000000">&nbsp;</td>
      <td align="right" bgcolor="#000000"><div align="center">
          <input type="submit" name="Submit" value="Login">
        </div></td>
    </tr>
  </table>
</form>

Can anyone see what the problem is, because i cant find what the problem is.
Cheers

ereptur

if ((!$username) || (!$password)) {
      echo "Please enter ALL of the information! <br />";
      include 'login.html';
      exit();
}

try changing this section to

if (empty($username) || empty($password)) {
    echo "Please enter ALL of the information!<br />";
    include 'login.html';
   exit;
}

olly2111

nope still the same 🙁

olly2111

any help?

olly2111

bump

kevinsequeira

debug ...

try this

<?
session_start();  // Start Session
    if ($HTTP_POST_VARS) {
      $vars = $HTTP_POST_VARS;
    }
     print_r($vars);
/* Check User Script */

include 'db.php';
// Conver to simple variables
$username = $vars['username'];
$password = $vars['password'];
if ($username =="" || $password =="") {
      echo "Please enter ALL of the information! <br />";
      include 'login.html';
      exit();
}

reg
kevin

maniac1aw

on an older build of PHP i still run on a dev server I have to find/replace $POST with $HTTP_POST_VARS on scripts to get them to work. THis is because the $POST and $_GET arrays are new.. try it....

here is a function i wrote when learning PHP after being an ASP dev for a few years.. still works

/////////////request
	function Request($x)
	{
		global $HTTP_POST_VARS;
		global $HTTP_GET_VARS;

	if (strlen($HTTP_POST_VARS[$x])<1)
	{
		return $HTTP_GET_VARS[$x];
	}
	else
	{
		return $HTTP_POST_VARS[$x];
	}


}// end request
////////////end request

jimson

generally, i can't found any error about the script... 🙁
is that possible that the db.php modify some of ur $POST
values... ?
probably i can help u to solve it, if u can show the db.php code...
i suspect something weird there.

<?php
if(!empty($_POST)) {
	$username = $_POST['username'];
	$password = $_POST['password'];
	// try this here in your script.
	echo $username.'<br>';
	echo $password;
	if ((!$username) || (!$password)) {
		echo "Please enter ALL of the information! <br />";
	}
} else {
?>
<form action="a.php" method="post" name="" id="">
	<input name="username" type="text" id="username" size="12">
	<input name="password" type="password" id="password" size="12">
	<input type="submit" name="Submit" value="Login">
</form>
<?php
}
?>

jimson

what is ur php version... i miss this... 🙁

olly2111

im not too sure of the php version, but ive got past this problem, i just wanted to no what was the alternative to $SESSION[] as $POST didnt work untill i replaced it for $HTTP_POST_VARS
Is there an alternative that i can use to $_SESSION?

//EDIT the PHP Version is 4.0.6

jimson

perhaps an 4.3.2 will let u use the $_SESSION

laserlight

The deprecated version is $HTTP_SESSION_VARS

jimson

at http://www.php.net/manual/en/reserved.variables.php#reserved.variables.session

shows that

Session variables: $_SESSION
Note: Introduced in 4.1.0. In earlier versions, use $HTTP_SESSION_VARS.

a 4.1.0 will let u have $_SESSION...