Whats wrong here?

watma

Hi,

New to PHP. Please help.

Code:

<?php

if ((!$POST[username]) || (!$POST[password])) {
exit;
}

$conn = mysql_connect("localhost", "root", "mysql")
or die(mysql_error());
mysql_select_db("MyFirstDB", $conn) or die(mysql_error());

$sql = "select f_name, l_name from auth_users where username = '$POST[username]' AND password = password('$POST[password]')";
$result = mysql_query($sql, $conn) or die(mysql_error());

if (mysql_num_rows($result) == 1) {

$f_name = mysql_result($result, 0, 'f_name');
$l_name = mysql_result($result, 0, 'l_name');

setcookie("auth", "1" 0, "/", "yourdomain.com", 0);

$display_block = "<P>$f_name $l_name is authorized!</P>
<ul>
<li><a href="secretpage.php"> Secret Page</a>
</ul>";

} else {

exit;

}

?>
<html>
<head>
<title>User Login</title>
</head>
<body>
<? echo "$msg"; ?>
</body>
</html>

Error:

Warning: Unexpected character in input: '\' (ASCII=92) state=1 in C:\wamp\www\trial1\login_debug_tmp.php on line 2 Parse error: parse error, unexpected T_STRING in C:\wamp\www\trial1\login_debug_tmp.php on line 2

No clue as to the error. Help!

TIA

mmonaco

You need single quotes around string-based keys, in addition i think you need parantheses after exit - exit();

Theres probably going to be additonal errors

Rodney_H_

It appears that there is an extra value in your setcookie function:

[INDENT]setcookie("auth", "1" 0, "/", "yourdomain.com", 0); [/INDENT]

I think you meant:

[INDENT] setcookie("auth", "1", "/", "yourdomain.com", 0); [/INDENT]

So, if you follow this advice, and that of mmonaco, you might get something like this:

<?php
// if username or password is empty
if (empty($_POST['username']) || empty($_POST['password'])) {
	exit('You forgot to enter your login info.');
}
else {
	// convert posted values to variables
	// and assign them their values
	$user = trim($_POST['username']);
	$pass = trim($_POST['password']);

// connect to mysql
$conn = mysql_connect("localhost", "root", "mysql")
		or die('Could not connect to mysql: ' . mysql_error());

// select db
$db = mysql_select_db("MyFirstDB", $conn) 
	or die('Could not select database: ' . mysql_error());

// query statement
$sql = "SELECT f_name, l_name FROM auth_users WHERE username = '" . 
		$user . "' AND password = password('" . $pass . "')";

// conduct query
$result = mysql_query($sql, $conn) 
		or die('Could not execute query: ' . mysql_error());

// if result
if($result){
	$row = mysql_fetch_array($result);
	// get values from query
	$f_name = $row['f_name'];
	$l_name = $row['l_name'];
	// set cookie
	setcookie('auth', '1', '/', 'yourdomain.com', 0);
	// use results in html display
	echo '<p>' . $f_name . ' ' . $l_name . ' is authorized!</p>
	<ul>
		<li><a href="secretpage.php"> Secret Page</a>
	</ul>';
	exit;

}

// else not found in database: unauthorized!
else {
	exit('You are not authorized!');
}

?>