verifying users and pass

[aznjay]

<? 
session_start();

$conn = mysql_connect("localhost","",""); 
$db = mysql_select_db(""); 
$usernames = $_POST['username'];
$passwords = $_POST['password'];



$result = MYSQL_QUERY("SELECT username, password from users WHERE username='$username' and password='$password'") or die ("Name and password not found or not matched");
$worked = mysql_fetch_array($result); 
$user = $worked[username]; 
$password = $worked[password];
$html = $_POST['edithtml'];
$_SESSION['edithtml'] = ($user);
$my_quadrant = $_SESSION['edithtml'];

if($worked)

echo "Welcome $user";
echo "<br>";
echo $_SERVER["REMOTE_ADDR"];

?>

Hey how can you anyone add the verification script here??:rolleyes:

[Yamakazi]

Delete the line where you fetch the array worked $Worked
And instead of doing

if($Worked){}

DO:

if($Worked = mysql_fetch_array($result)){}else{Echo ('Not logged in.');}

Logical result of this is that you have copy this code:

$user = $worked[username];  

$pass = $Worked[pass];

Into your if.

Happy coding :p

[TTT]

i have no idea why "SELECT username, password " whenyou are having "WHERE username='$username' and password='$password'"

i think it should be "select id from users where ..."

<?  

session_start(); 

$conn = mysql_connect("localhost","","");  

$db = mysql_select_db("");  

$usernames = $_POST['username']; 
$passwords = $_POST['password']; 


$result = MYSQL_QUERY("SELECT username, password from users WHERE username='$username' and password='$password'") or die ("Name and password not found or not matched"); 
if(mysql_num_rows($result) != 0) {
  $worked = mysql_fetch_array($result);  

  $user = $worked[0];  

  $password = $worked[1]; 
  $html = $_POST['edithtml']; 
  $_SESSION['edithtml'] = ($user); 
  $my_quadrant = $_SESSION['edithtml']; 
 echo "Welcome $user"; 
 echo "<br>"; 
 echo $_SERVER["REMOTE_ADDR"]; 
} else {
     echo "Wrong username or password";
}

?>