ANY HELP Appreciated?!?!?! WILL PAY FOR HELP!

[m37h0d]

This is auth.php, I just want to have to include auth.php in each page I want a login, it shows the login and everything, but when I enter the correct info, it just refreshes and goes back to the form.

I will pay $2.50 for a fix, give your paypal address!

Thanks,
Brayden

<?
if($submit)
{
$dbh = mysql_connect("localhost","brayden_cookies","puma");
mysql_select_db("brayden_cookies",$dbh) or die (mysql_error());
$query=("SELECT * FROM login WHERE `username`='$username' AND `password`='$password'");
$result=mysql_query($query);
if ($result){
setcookie ("username", $username, time()+3600);
setcookie ("password", $password, time()+3600);
$redirect="main.php";
Header ("Location: $redirect");
if (!isset($result))
{
echo "incorrect password or username";
}
exit;
}
}
if (isset($_COOKIE['user']) && isset($_COOKIE['pass']))
{
	//OK BOTH ARE SET.. YEHAWW
}
if (!isset($_COOKIE['user']) && !isset($_COOKIE['pass']) && !isset($submit))
{
	?>
	<form action="auth.php" method="post">
<table>
	<td align="center" width="50%">
    Please Login...
	<tr width="25%>
	<font face="verdana" size="1">
      <td>Username:<input type="text" name="username">
	</tr>
	<tr width="25%>
	<font face="verdana" size="1">
      <td>Password:<input type="password" name="password">
	</tr>
      <td>
        <p align="center">
	<input type="submit" name="submit" value="Submit">
	</form>
      </table>

<?
exit;
}

[arlon_yin]

$query=("SELECT FROM login WHERE username='$username' AND password='$password'");
=>
$query=("SELECT FROM login WHERE username='".$POST['username']."' AND password='".$POST['password']."'");

[m37h0d]

thanks but didnt work 🙁

[arlon_yin]

your form action is post,then if you press submit,the variables username and password will post to the auth.php.in this file you will get the two variables by $POST['username'] and $POST['password'] not $username and $password.
if your form action is get,then you can get the variable by $_GET['*'].

[arlon_yin]

if($submit)
=>
if($_POST['sbumit'])

[m37h0d]

You can use $<POSTVARIABLE> now...

[id10t]

Have a login page, and on that page start a session. Do your db query, and set a session var to reflect the login state and other vars for whatever personalization you want. Then on each page you want protected, have an include file that first thing checks to see if the login is set to being checked and a-ok. If it isn't, or if the variable isn't set, redirect to the login page.

Bonus - This way, you only have one db query instead of for every page load.

Oh, and start by doing import_request_variables("P","rvar_");

Then you can access all your post vars as $rvar_foo

[Weedpacket]

http://www.phparch.com/cert/training.php
http://directory.google.com/Top/Computers/Education/Commercial_Services/Training_Companies/Programming/

[dalecosp]

:rolleyes: That sum would buy a little less than a tenth of a {half?} hour from a low-priced 'professional' shop, in a rural US area. Please don't insult professionals in this way.

The forum isn't meant for job postings, anyway. I think most everyone here would rather have gratitude and respect rather than a Happy Meal anyway (and aren't they $2.99?).

<?php
session_start();

if ($_POST['submit']) {
   $dbh = mysql_connect("localhost","brayden_cookies","puma"); 
   mysql_select_db("brayden_cookies",$dbh) or die (mysql_error()); 
   $query=("SELECT * FROM login WHERE username='$username' AND password='$password'"); 
   $result=mysql_query($query); 
      if ($result){ 
         $_SESSION['auth_user']=1;
}
   $redirect="main.php"; 
   Header ("Location: $redirect");
}

if (!$_SESSION['auth_user']) {

echo "<h3>You're not authorized!</h3>

<form action=".$_SERVER['PHP_SELF']." method=\"post\">Username:
   <input type=\"text\" name=\"uname\">
   <br />
   <input type=\"password\" name=\"pass\">
   <br />
   <input type=\"submit\" name=\"submit\">
</form>
";
}

Or something.

Chart on the wall says you owe me 28 bucks. But, the code is free. Just try and understand what community is about around here, and don't insult by offering pocket change. It's not that I'm sneering at you, or your means, (you could really be a millionaire for all I know), it's just not how things are done here. Look for Weedpacket's post "How to Get Help at All" on this site.

(while ($noclue)) echo "Besides, job postings are not allowed here .... :glare: ";

[ppowell]

I bet you might want to try this:

foreach ($_POST as $key => $val) if (!isset(${$key})) ${$key} = $val;

Put that line before you check $submit and watch what happens THIS time!

Phil

[Weedpacket]

Originally posted by dalecosp
B echo "Besides, job postings are not allowed here .... :glare: "; [/B]

Maybe that should include bribes (even pitiful ones).