need a full working user auth

mikewooten

i am new to working with mysql with php
i need a full working user auth
can anyone take a look at the code below and let me know
what else i would need to add to make the user auth work?
if there is anything that i need to add, can you write out the
code for me below along with my user auth file.
thanks

$host ="localhost";

$username="user";

$password="pass";

$database="database";

$table_name = "tablename";

$connection = mysql_connect( $host, $username, $password ) or die( "Connection Error" );
mysql_select_db($db);

$user = $POST['auser'];
$pass = $POST['apass'];

$result = mysql_query("SELECT * FROM $table_name WHERE auser == '$user' AND apass == '$pass'");

if ($auser == "$auser" AND $apass == "$apass")
{
echo " <center>Welcome $auser Click here to logon ";

echo "

<form action='login.html' method='post'>
<input type='hidden' name='select2' value='$auser'>
<a href='login.html'>login</a>
</form>
";

}
elseif ($auser <> "$auser" AND $apass <> "$apass")
{
echo "You are rejected, information has not been accepted as valid. <a href='login.html'>Login</a>";
}
else
{
echo ("YOU GOT REJECTED, YOU MUST LOGIN FIRST BEFORE YOU MOVE ON <a

href='login.html'>LOGIN</a> ");
}

Moonglobe

$database="database";
//...
mysql_select_db($db);

that's wrong, the variables are named diferently. you're never selecting a database.

mikewooten

i have changed the code to fix the database, i have selected the database, what else could be wrong with the code so that it will work?
thanks
$host ="localhost";

$username="mwooten1";

$password="mikeswoo";

$database="mwooten1_sampledb";

$table_name = "ecom";

$connection = mysql_connect( $host, $username, $password ) or die( "Connection Error" );
mysql_select_db($database);

Moonglobe

well you're never using $result..... try looking here:

[man]mysql_fetch_assoc/man

hth
moon

mikewooten

is this what i should be using as the result?
can you let me know
thanks

$result = mysql_query($sql);

if (!$result) {
    echo "Could not successfully run query ($sql) from DB: " . mysql_error();
    exit;
}

if (mysql_num_rows($result) == 0) {
    echo "No rows found, nothing to print so am exiting";
    exit;
}

while ($row = mysql_fetch_assoc($result)) {
echo $row["auser"];
echo $row["fapass"];

Moonglobe

yup, that would work 😃

mikewooten

when i viewed the file it gave me this warning message
Fatal error: Call to undefined function: mysqsl_num_rows()

how can that be fixed so that the file will be fixed and working?

thanks

Moonglobe

if you can't find that error i pity you:rolleyes:

hint: PHP errors are exactly what they say.

mikewooten

the file also has this message

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource

and this message

Could not successfully run query () from DB: Query was empty

how can those messages be fixed, what would i have to do to fix that and get the file to work?

thanks

Moonglobe

Ok, it's telling you that because in the above EXAMPLE there is no $sql, so the query will fail, obviously. and a simple mistyping of a function should not be a problem for someone to figure out :rolleyes:

mikewooten

question?
i understand the database failing, but how would i fix this message, what would i need to do?
thanks

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource

Moonglobe

that means that $result is not a mysql resultset. once it is (IE a proper query) then taht will go away

mikewooten

how can i make it an IE a proper query?
thanks