User Authentication

jennifer_ann

Here's what I'm trying to do. If a person types in a valid name and password, it will go to the next page. If the username doesn't exist, then I need it to print an error message. If the username exists but the password doesn't then I need it to print another error message. As of right now I have this.

<?php

//connect to our database
mysql_connect("localhost","root","") or die (mysql_error());

//select our database
mysql_select_db("mapleside") or die (mysql_error());

//get and store our variables from the form
$Customer_UserName = $_POST["Customer_UserName"];
$Customer_Password = $_POST["Customer_Password"];

//grab everything in our database that relates to the user
 $queryResult = mysql_query ("SELECT * FROM customer WHERE Customer_UserName = '.$Customer_UserName'");
 $queryResult2= mysql_query ("SELECT * FROM customer WHERE Customer_Password = '.$Customer_Password'");

  if (!$queryResult)
  {
      die("Error! Invalid UserName" . mysql_error());
  } 

//check the password according to our database
if (!$queryResult2)
{
    //display error and do nothing else
    die("Password is incorrect, please try again");
}
else
{
    echo "Logged in sucessfully.<br>";
    echo "<a href='http://localhost/login1.htm'>Please click here to continue</a>";
} 
<html>
<body>
    <form action="login.php" method="post">
	Login Name: <input type='text' name='Customer_UserName' maxlength='25' size='15'><br>
	Login Password: <input type='password' name='Customer_Password' maxlength='25' size='15'><br>
	<input type='submit' name='LoginSubmit' value='Login'>
	<input type='reset' name='Reset' value='Reset'>
	</form>
</html>
</body>
?>

For starters I'm getting a parse error on my form where it says <html> secondly no matter what name I put in, it says Logged in Successfully. I dont understand. I think my queries are right..........

devinemke

<html>
<body>

<?php
if (!isset($_POST['submit']))
{
  echo '
  <form action="" method="post">
  Login Name: <input type="text" name="Customer_UserName" maxlength="25" size="15"><br>
  Login Password: <input type="password" name="Customer_Password" maxlength="25" size="15"><br>
  <input type="submit" name="submit" value="Login">
	<input type="reset" name="Reset" value="Reset">
  </form>
	';
}
else
{
  mysql_connect('localhost', 'root', '') or exit(mysql_error());
  mysql_select_db('mapleside') or exit(mysql_error());
  $result = mysql_query ("SELECT * FROM customer WHERE Customer_UserName = '" . $_POST['Customer_UserName'] . "'") or exit(mysql_error());
  if (mysql_num_rows($result))
  {
   	 $row = mysql_fetch_assoc($result);
  	 if ($row['Customer_Password'] == $_POST['Customer_Password'])
  	 {
    	 echo 'Logged in sucessfully.<br><a href="http://localhost/login1.htm">Please click here to continue</a>';
  	 }
		 else
		 {
		  	 exit('incorrect password for ' . $_POST['Customer_UserName']);
		 }
  }
  else
  {
   		echo 'no rows found matching UserName ' . $_POST['Customer_UserName'];
  }
}


?>

</body>
</html>

jennifer_ann

Thank you for that but can you explain what I did wrong?

artlover

user(1)
username : 123456
password : 654321

user(2)
username : 654321
password : 123456

if any user submit :
username : 654321
password : 654321

he will go to the next page 🙂

Weedpacket

jennifer_ann wrote:
Thank you for that but can you explain what I did wrong?

You forgot the closing ?> php tag.

jennifer_ann

Ahhhhhhhhhh I see! How crazy! Thank you