[Resolved] Help with login script

[solfshr]

Hello,

I am new to PHP and am having problems with users being able to log in. I have tested the following code on my machine at home and it works perfectly, however when I try to log in on the clients' server it sends me back to the login page. Any help is greatly appreciated. Thanks.

<?php require_once('../Connections/myConn.php'); ?>
<?php
$username=$POST["username"];
$password=md5($POST["password"]);
mysql_select_db($database_myConn, $myConn);
$query_rsLogin = "SELECT username,password FROM members WHERE username='$username' and password='$password'";
$rsLogin = mysql_query($query_rsLogin, $myConn) or die(mysql_error());
$row_rsLogin = mysql_fetch_assoc($rsLogin);
$totalRows_rsLogin = mysql_num_rows($rsLogin);
if ($totalRows_rsLogin >= 1) {
session_start();
$HTTP_SESSION_VARS['auth'] = $username;
header("Location: reservations.php");
exit;
}
else
{
header("Location: login.php");
exit;
}

mysql_free_result($rsLogin);
?>

Cassandra

P.S.- I am using PHP 4.3.0 the other server is using PHP 4.3.1

[dalecosp]

In versions of PHP > 4.0, you don't need to use $HTTP_SESSION_VARS; I'd suggest $_SESSION['whatever'] instead...however, I don't think that's the problem, as HTTP_SESSION_VARS is still available (just deprecated...)

Hmm, is the password actually stored in md5 in the db on the remote machine?

What debugging have you done? Insert an 'echo' or a 'print_r' to check that your variables are being passed correctly...

I dunno fer sure, tho'...looks pretty straightforward.... 🙁

[frymaster]

hrm. it's impossible to tell from just the code why it would work lcally but not on yr server. i would suspect that it's because of the actual data in the database (or lack thereof)

on a side note: it would probably be cleaner to do something like "select count(*) from ____ where username='$username' and password='$password'".

[solfshr]

Thank you both for your help. It finally works on the other server. I followed your reccomendations and changed the code to :

<?php require_once('../Connections/myConn.php'); ?>
<?php
$username=addslashes($POST["username"]);
$password=md5($POST["password"]);
mysql_select_db($database_myConn, $myConn);
$query_rsLogin = "SELECT count(*) FROM members WHERE username='$username' and password='$password'";
$rsLogin = mysql_query($query_rsLogin, $myConn) or die(mysql_error());
$row_rsLogin = mysql_fetch_assoc($rsLogin);
$totalRows_rsLogin = mysql_num_rows($rsLogin);
if ($totalRows_rsLogin >= 1) {
session_start();
$_SESSION['auth'] = $username;
header("Location: reservations.php");
exit;
}
else
{
header("Location: login.php");
exit;
}

mysql_free_result($rsLogin);
?>

Thanks,
Cassandra

[dalecosp]

Originally posted by solfshr
Thank you both for your help. It finally works on the other server. I followed your reccomendations and changed the code to :

SNIP

Thanks,
Cassandra

Yippeee!!!!! 🙂