PHP login is being uncooperative ;)

methulah

I have been trying to make simple php login script where I have a html form point to a php script to make a simple login. I have a MySQL table called tbUser.

My form is called "USER_DATA" and its action is "post" and it points to login.php.

//Begin login.php

<?php
if(!empty($result)){
                $USER_DATA = mysql_fetch_array($result);
                setcookie ("userID", $USER_DATA["ID"]);
                header("location:member.htm");

}else{

           header("index.htm");

}
?>
//End login.php

My MySQL database table is called tbUSER

it looks like this:

Name VarChar100 PrimaryKey
Password VarChar100
DateCreated DateTime
LastLogin DateTime

Thats all it is, and my html for is correct as is my member.htm page. When I enter the correct user details (that i have entered using PHPMyAdmin the login.php script refers me back to index.htm except the url that IE shows is:

http://boggdin.ifreepages.com/index.htm?name=[username]&password=[password]

except with [username] and [password] being my username and password (which i would rather not disclose 😉 )

Can anyone give any sort of help or refer me somewhere. I know it is probably some stupid little thing, but i'm really loosing sleep over this one. Thanks.

shamly

Well according to what i understand by looking at the URL that u have given there are 2 "<form>" tags. Try removing the "<form>" tag thats right on the top.

helz

looking at your login.php file, i fail to see anything that checks the database for the posted login details

maximum-php

If that is all the code login.php has. Then I would agree with Helz. There is no code in there to check the submitted information from the form, with the contents of your database.

From what little experince I have with PHP / MySQL, to me it looks like your Query of the MySQL database is also incorrect.

To me the code should look more like -

<?php
$connection = mysql_connect('localhost', 'user', 'password');
mysql_select_db('YourDatabase');

$query = "SELECT * FROM tbUSER WHERE user='".$name."'";
$result = mysql_query($query);

$info = mysql_fetch_array($result, MYSQL_NUM);
mysql_close($connection);

if ($info[0] == $name AND $info[1] == $password ) {
Header ("Location: http://boggdin.ifreepages.com/member.htm");
Other cookies / ext set here.
}
else Header ("Location: http://boggdin.ifreepages.com/index.htm");

Hopefully that helps out, pretty much from what I could tell, is that your login.php as it stands, does not pull the results from the MySQL database correctly nor does it check your post information against anything.