What is Best Way to Do a Password ID Login?

fireineyes

Ok I have mysql table set up for adding realtors. Each time a new entry is created, the entry has an id auto created and they are required to make a password in the new entry form. So what i have is something like...

id | pass | first | last | url

1 | mypwd | Joe | Realtor | www.joe.com
2 | p2013de | Sue | Smith | www.sue.com

etc...etc...

Now what I want is a way for them to be able to log back in based on their own username and password to edit their info. I have successfully installed & modified the code form this tutorial for editing the entries...

http://webmonkey.wired.com/webmonkey/99/21/index3a_page6.html?tw=programming

But this script actually allows one person to edit any entry. What I need is for the person to pull up the page and see a username (id) & password form prompt. If they correctly enter their login information, then I want them to only be able to edit their own entry.

Would I be best to do something like

If (id == "$id" || pass == "$pass") {Run the Editing Script here. }
Else{ Error Message Stuff}

I am very new to php so I am probably wrong here but I am sure this can simply be done. Please help me if you can. Thanks!

::😛S:::::::::::::::::::::::::::::::::

If any ideas on how to tweak the tuorial code to make it only edit one entry, I would appreciate any input there too.
:::::::::::::::::::::::::::::::::::::::

chads2k2

Thousands of ways to do this (LITERALLY)! But the way you have it is not one.

If (id == "$id" || pass == "$pass") {Run the Editing Script here. }
Else{ Error Message Stuff}

This posses a problem. If they enter an ID that is correct then it's all good. If that statement is false then it looks to the password to see if it equals. If either one is true then it goes through. Well ... defeats the whole purpose of a login script.

Your looking for something like:

if((id == $id) && (pass == $pass)){
  echo "Do an include or something.";
}else{
  echo "Sorry you do not meet our criteria.  Go away.";
}

Do you see the difference between those? The one I put in will look to make sure that the id equals the right id and the password is set as well. Since you are working from a database (assuming MySQL) then do this SQL statement and look for results:

SELECT * FROM tbl_name WHERE id="$id" && pass="$pass";

Count the returned results. If it is 0 then they didn't enter a credential right. Let MySQL do the work. 🙂 I am lazy. Like I said there are Thousands of ways you can do this and I am sure another bright someone will answer this thread with something new. Learn, grow, code.

Chad