Hi im making an AJAX login script and the ajax part makes a post to this php file after the login form is submitted. The problem is the cookies are not created and it always says your session has expired...
<?php
include 'config.php';
mysql_connect(localhost,$cs_sqluser,$cs_sqlpassword);
mysql_select_db($cs_sqldb);
if ($_POST['action'] == 'login'){
if (!empty($_POST['username']) && !empty($_POST['password'])){
$username = $_POST['username'];
$password = $_POST['password'];
login($username, $password);
}else{
echo 'Please fill in all fields!<br><a href="#" onclick="includescript(\'loginform.js\');">Go Back</a>';
}
}
function login($username, $password){
$query = "SELECT * FROM users WHERE username='$username'";
$result = mysql_query($query);
$rows = mysql_num_rows($result);
if($rows>0){
$db_password = mysql_result($result,0,"password");
if ($db_password == $password){
setcookie('username', $username, time() + $cs_cookielength);
setcookie('password', $password, time() + $cs_cookielength);
userinfo();
}else{
echo 'Incorrect password!<br><a href="#" onclick="includescript(\'loginform.js\');">Go Back</a>';
}
}else{
echo 'Username not found!<br><a href="#" onclick="includescript(\'loginform.js\');">Go Back</a>';
}
}
function userinfo(){
if (empty($_COOKIE['username']) || empty($_COOKIE['password'])){
echo 'Your session has expired!<br><a href="#" onclick="includescript(\'loginform.js\');">Login</a>';
}else{
$username = $_COOKIE['username'];
$password = $_COOKIE['password'];
$query = "SELECT * FROM users WHERE username='$username'";
$result = mysql_query($query);
$rows = mysql_num_rows($result);
if($rows>0){
$db_password = mysql_result($result,0,"password");
$access_level = mysql_result($result,0,"admin");
if ($db_password == $password){
echo '$access_level|$username';
}else{
echo 'Incorrect password!<br><a href="#" onclick="includescript(\'loginform.js\');">Go Back</a>';
}
}else{
echo 'Username not found!<br><a href="#" onclick="includescript(\'loginform.js\');">Go Back</a>';
}
}
}
if this will not work with cookies, can sombody please explain how i can get sessions to work and stay, like not expire in minutes?