Indexes helped

mikewooten

i am new to using mysql with php and need help getting a user auth to work with an e-commerce website.
can anyone take a look at it and give me feedback on what else i would need to do to get the login process to work. i need a user registration and login forms.
thanks
here is my code below:
LOGIN.HTML

<form action="login.php" name="form1" method="post" onsubmit="return validate(this)">
<input type="hidden" name="select" value=" ">
Username
<input type="text" name="auser" size="20" maxlength="20"><br>
Password
<input type="text" name="apass" size="20" maxlength="20"><br>

</form>
if you have not registered,<br> please register here<br>
<a href="account.html">Register</a>

<?
$db_name = "dbname";
$table_name = "ecom";
$link_id = mysql_connect("localhost", "dbuser", "dbpass")

or die("Couldn't connect.");
$db = mysql_select_db($db_name, $link_id)
or die("Couldn't select database.");
mysql_query ("SELECT * FROM $table_name WHERE auser == '$auser' AND apass == '$apass'");
echo "$select<br>";

$host    ="localhost";
$username="dbuser";
$password="dbpass";
$database="db";

mysql_connect($host,$username,$password);
mysql_select_db($database) or die( "Unable to select database");

if ($auser == "$auser" AND $apass == "$apass")
{
echo "<br><br><center><font size='+2'>Welcome $auser <br>Click here to logon <br><br>";

echo "

<form action='login.html' method='post'>
<input type='hidden' name='select2' value='$auser'>
<a href='login.html'>login</a>
</form>
";

}
elseif ($auser <> "$auser" AND $apass <> "$apass")
{
echo "You are rejected, information has not been accepted as valid.<br><a href='login.html'>Login</a>";
}
else
{
echo ("<font size='+2'><strong>YOU GOT REJECTED</strong></font>, <BR> YOU MUST LOGIN FIRST <BR>BEFORE YOU MOVE ON<BR><a href='login.html'>LOGIN</a><br>");
}

mfacer

hmm.... there is a lot of uneccessary code in your PHP file....
try using this code as the login. You also didnt specify what your $table_name was....

$host ="localhost"; 
$username="dbuser"; 
$password="dbpass"; 
$database="db"; 
$talbe_name = "your_table_name";


$connection = mysql_connect( $host, $username, $password ) or die( "Connection Error" );
mysql_select_db($db); 

$user = $_POST['auser'];
$pass = $_POST['apass'];

$result = mysql_query("SELECT * FROM $table_name WHERE auser == '$user' AND apass == '$pass'");

if (mysql_num_rows($result) > 0)
{

//we have a match, so the details must be correct

//echo OK message.....

}
else
{

//echo not registered info

}

it may not be perfect, but it should work?!
let me know how it goes!! 🙂

mikewooten

in my user auth code, which code is uneccessary, also which echo message goes with the (mysql_num_rows($result) > 0)?
when i go to view the login.php it gives me this warning message:

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/user/public_html/login3.php on line 29

i have up dated the code with your suggestions. can you give me suggestions on what i can do to fix the error so that the login will work?

thanks
here is the code below:

$host ="localhost";

$username="dbuser";

$password="dbpass";

$database="db";

$table_name = "table_name";

$connection = mysql_connect( $host, $username, $password ) or die( "Connection Error" );
mysql_select_db($db);

$user = $POST['auser'];
$pass = $POST['apass'];

$result = mysql_query("SELECT * FROM $table_name WHERE auser == '$user' AND apass == '$pass'");

if (mysql_num_rows($result) > 0)
{
/
if ($auser == "$auser" AND $apass == "$apass")
{
/
echo "<br><br><center><font size='+2'>Welcome $auser <br>Click here to logon <br><br>";
echo "
<form action='login.html' method='post'>
<input type='hidden' name='select2' value='$auser'>
<a href='login.html'>login</a>
</form>
";

}

elseif ($auser <> "$auser" AND $apass <> "$apass")
{
echo "You are rejected, information has not been accepted as valid.<br><a href='login.html'>Login</a>";
}
/
}
/
else
{

echo ("<font size='+2'><strong>YOU GOT REJECTED</strong></font>, <BR> YOU MUST LOGIN FIRST <BR>BEFORE YOU MOVE ON<BR><a href='login.html'>LOGIN</a><br>");

}