help with login page!!!!

[chixinjuedui]

i need to do a login page that check ur password and userid.
but when i click login , nothing happen.
can anyone help me ? thanks

the below is my coding:
<?php

session_start();
//ob_start(session_start());
if (isset($POST['UserID']) && isset($POST['Password'])) {
$myServer = "localhost";
$myUser = "sa";
$myPass = "";
$myDB = "SCSMembers";
$conn = mssql_connect('localhost', 'sa', '');
$blnresult = mssql_select_db('[SCSMembers]', $conn);

$UserID = $POST['UserID'];
$Password = $POST['Password'];

$sql = "SELECT * FROM AR01_MEMBER_ACCOUNT WHERE NRIC = '$UserID' AND Password = '$Password'";
$result = mssql_query($sql) or die('Query failed. ' . mssql_error());
print "true";
if (mssql_num_rows($result ==1)) {

  $_SESSION['db_is_logged_in'] = true;
  header('Location: main.php');

} else {

  $errorMessage = 'Sorry, wrong user id / password';

}

}

[The_Chancer]

Are register globals set ??

Cos you are using $password - not $POST['password'] and $POST['userid'] in the SELECT query....

[TheDefender]

He's defining them right above the query...

$UserID = $_POST['UserID']; 
$Password = $_POST['Password']; 

chix...

Right here:

} else { 

$errorMessage = 'Sorry, wrong user id / password'; 
} 

// add an else and echo here to see if this (if (isset($_POST['UserID']) && isset($_POST['Password'])) {) validated to true or not...

}

[nashirak]

Try taking out that

 print "true";

You cant print anything to the screen if you want to use

 header('Location: main.php'); 

because the headers have already been sent.

[The_Chancer]

Tch - too long away from the boards - must need my eyes testing....

[The_Chancer]

The answer lies with this though...

print "true";
if (mssql_num_rows($result ==1)) {

$_SESSION['db_is_logged_in'] = true;
header('Location: main.php');

} else {

$errorMessage = 'Sorry, wrong user id / password';
}

Should be

<?php

session_start();
//ob_start(session_start());
if (isset($_POST['UserID']) && isset($_POST['Password'])) {
$myServer = "localhost";
$myUser = "sa";
$myPass = "";
$myDB = "SCSMembers";
$conn = mssql_connect('localhost', 'sa', '');
$blnresult = mssql_select_db('[SCSMembers]', $conn);

$UserID = $_POST['UserID'];
$Password = $_POST['Password'];

$sql = "SELECT * FROM AR01_MEMBER_ACCOUNT WHERE NRIC = '$UserID' AND Password = '$Password'";
$result = mssql_query($sql) or die('Query failed. ' . mssql_error());
if (mssql_num_rows($result) ==1) {
$_SESSION['db_is_logged_in'] = true;
echo "This is true and redirect";
//header('Location: main.php');
//remove // to allow for redirect
} else {

$errorMessage = 'Sorry, wrong user id / password';
echo "wrong user / pass";
} 

If you are using header(); you cannot echo anything to the browser other wise it should kick up an error (dependant on the error reporting on the server...)

God darn... someone always beats me to the punch - I knew I shouldn't be working at the same time....

[chixinjuedui]

i try ur method but still nothing appear when i click login.

[The_Chancer]

As far as I can see this isn't the whole script as you are missing a "}" at the end...

Do simple debug bits - place an "else" statement after this "if" so that you can tell if the form has both $POST['UserID'] and $POST['Password'] set. Echo out in areas so you can see how far your script got - do this in each "IF" statement..

Goldbug had a great FAQ on this somewhere on the board - can't remember where it is though.... :rolleyes: