Login Page

vexer007

PLEASE HAVE A LOOK AT THE CODE BELOW TO SEE IF YOU CAN SPOT WHY IT KEEPS GOING TO THE view-blog.php PAGE NO MATTER WHETHER THE PASSWORD OR USERNAME IS WRONG PLEASE.

		$submit = $_POST['submit'];
					$username = $_POST['username']; 
					$password = $_POST['password']; 			
	if(isset($submit)) 	{

// check if user exists in the database
$query = "SELECT username, email FROM users WHERE username = '$username' AND pass = '$password'";
$result = $conn->execute($query);
$Recordset = ($result);
if ($Recordset) {
	die("<META http-equiv=\"Refresh\" content=\"0;url=view-blog.php\">");
exit();
} else {	
	echo '<p><font color="990000" size="+2">OOPS!! The EMAIL AND OR, USERNAME you entered are not valid registered user detail</font></p>';
	echo '<p> Please either re-enter the correct email and a matching username, or Register an Account using the link on this page!</p>';
	echo '<b><hr color="990000">';
	}
$conn->close();

} else {
echo '<p><strong><font color="000000" size="+2"> Welcome - Please Add Your Comment </font></strong></p>';
echo '<b><hr color="990000">';
}
?>

THANK YOU FOR YOUR HELP!

devinemke

it keeps going to the view-blog.php page because that is precisely what you have coded it to do:

if ($Recordset)
{ 
die("<META http-equiv=\"Refresh\" content=\"0;url=view-blog.php\">"); 
exit();
}

so if $Recordset is TRUE (which it would be if your query is run successfully) then you are echoing the meta refresh. remember, a result from a query will be boolean TRUE if the query was successfully run. it is perfectly logical for a query to be successful (TRUE) and return 0 records. you need to check how many rows were returned, not whether the query was successful or not.