won't login

vertmonkee

I have created a login in page for my site but when i try to login in, even though the user name and password are correct, it tells me that they are invalid.

Here is the code from the login.php page.


<?php
session_start();
include "includes\connect.php";

if (isset($_POST['submit'])) {
	$query = "SELECT username, password FROM user_info " .
	         "WHERE username = '" . $_POST['username'] . "' " .
	         "AND password = (PASSWORD('" . $_POST['password'] . "'))";
	$result = mysql_query($query)
	  or die(mysql_error());

if (mysql_num_rows($result) == 1) {
	$_SESSION['user_logged'] = $_POST['username'];
	$_SESSION['user_password'] = $_POST['password'];
	header ("Refresh: 5; URL= " . $_POST['redirect'] . "");
	echo "You are being redirected to your original page request!<br>";
	echo "(If your browser does not support this, " .
	     "<a href=\"" . $_POST['redirect']. "\">click here</a>)";

} else {

?>

<html>
<head>
<title>Please login to Skate Spots</title>
</head>
<body>
<p>
  Invalid Username and/or Password<br>
  Not registered?
  <a href="register.php">click here</a> to register.<br>
  <form action="login.php" method="post">
    <input type="hidden" name="redirect" value="<?php echo $_POST['redirect']; ?>">
    Username: <input type="text" name"username"><br>
    Password: <input type="password" name="password"><br><br>
    <input type="submit" name="submit" value="Login">
  </form>
</p>
</body>
</html>

<?php
}
} else {
	if (isset($_GET['redirect'])) {
		$redirect = $_GET['redirect'];
	} else {
		$redirect = "index.php";
	}
?>

<html>
<head>
<title>Please login to Skate Spots</title>
</head>
<body>
<p>
  Login below by supplying your username/ password....<br>
  Or <a href="register.php">click here</a> to register.<br><br>
  <form action="login.php" method="post">
    <input type="hidden" name="redirect" value="<?php echo $redirect; ?>">
    Username: <input type="text" name="password"><br>
    Password: <input type="password" name="password"><br><br>
    <input type="submit" name="submit" value="Login">
  </form>
</p>  

</body>
</html>

  <?php
}
?>

Thanks to anyone who can help and to those who cant as well

bogu

When u create your account, (when u make the insertion in db for password) did u use the same function PASSWORD() to store the password in db?

And debug your code, execute your select on the server, it returns 1 nr rows?

P.S. next time u post php code in a thread use php tags, like this:

//php code .....