It tells me invalid username and/or password. Is there something wrong in the code? Thanks. 🙂
<td width="620" rowspan="8" align="center" valign="middle" class="bginput"><p><font color="#696969" size="-1" face="Tahoma">Member's
Login:</font></p>
<?php
if(empty($_POST['uname']) OR empty($_POST['passwd'])) {
?>
<form name="memberlogin" id="memloginform" method="post" action="<?=$_SERVER['../PHP_SELF']?>">
<p><font color="#696969" size="-1" face="Tahoma">User name:</font> <input type="text" name="uname" class="txtfield" />
</p>
<p><font color="#696969" size="-1">Password:</font>
<input type="password" name="passwd" class="txtfield" />
</p>
<p>
<input type="submit" name="submit" value="Login" class="btnsubmit" />
</p>
</form>
<?php
} else {
$login = mysql_query("SELECT * FROM members WHERE `username` = '{$_POST['$uname']}' AND `password` = '" .md5($_POST['passwd'])."'");
$num = mysql_num_rows($login);
if(empty($num)) {
?>
<form name="memberlogin" id="memloginform" method="post" action="<?=$_SERVER['../PHP_SELF']?>">
<p><font color="#696969" size="-1" face="Tahoma">User name:</font> <input type="text" name="uname" class="txtfield" />
</p>
<p><font color="#696969" size="-1">Password:</font>
<input type="password" name="passwd" class="txtfield" />
</p>
<p>
<input type="submit" name="submit" value="Login" class="btnsubmit" />
</p>
</form>
<div align="center"><font color="#696969" size="-1" face="Tahoma"><b>Invalid user name and/or password. Please try again.</b></font>
<?php
} else {
echo("Welcome, $uname!");
}
}
?>