php help

[mnceo]

I have my own web server on this pc (windows xp home edition and works fine).. i'm working on transfering it to a different pc, but until i get that.. i'm doing all my stuff on here..

I am running the Latest Version of Apache, PHP5, MySQL5 and the latest version of phpMyAdmin.

I'm currently in the process in building a simple login system for my site but secure using sessions and when i created it.. it got the data from the database but when i typed the user info correctly and clicked Login.. It said Wrong Password.

my login.php page is just like any other login page.. it asks for a id and password then transfers the data from the form to process-login.php

This is the Script i have for the process-login.php page

<?php
if (empty($password)) { die("No Password specified");}
if ((strlen($password) < 5) || (strlen($password) > 20)) { die("Password too long/short");}
include("include/header.php");

$query="SELECT id,password FROM pilot WHERE id='$id'";
$pilot=mysql_query($query) or die("Could not execute Query");
$row=mysql_fetch_row($pilot);
if(!(md5($password) == $row['password'])) {
die ("Wrong Password");
} else {
die("User does not exist");
}
?>
Welcome <?php echo $id; ?>
<?php
include("include/footer.php");
?>

Please help, i dont know what i did wrong if anything. I still have to add the session code but in the mean time.. i need this to work then i'll add the session_start commands.

this is basically my first time creating a login system, i dont want to use tutorials.. i used a book to learn about doing this but then i put the book away and re-did the code at my own way but similar to the book. the book i used was "Making use of PHP" by Ashok Appu. it has PHP/MySQL scripts in there and i pulled this one out of this book then deleted the script and customized it to my own liking. it works just displays the wrong password even though the username and password are correct.

my config.php.ini file is included in the header.php script, i basically made a simple php template using tables

Toby

[mnceo]

to make things short,, the script works but ends up with a Wrong Password instead of showing me the content.. I typed in my correct id and password. if i take die command away and put echo.. it shows the content but then allows anyone to access the private page.

[thorpe]

Where do you define $password and $id?

[mnceo]

from the login page.. where the $id and $password are from this code on the login page

<input type="text" name="id"> will translate into $id
<input type="password" name="password"> will translate into $password

right here i'm selecting the data from the database

$query="SELECT id,password FROM pilot WHERE id='$id'";

if theres more coding i need to add.. please go ahead and say it and i'll add it in.. thats the main reason i'm here asking,, looking for errors or anything that will help me make this script working properly

[mnceo]

This is what i probably forgot to do

 $id = $_POST['id'];
  $password = $_POST['password'];

dont know...

edit" nope, still displays Wrong Password Error code

<?php
if (empty($password)) { die("No Password specified");}
if ((strlen($password) < 5) || (strlen($password) > 20)) { die("Password too long/short");}
include("include/header.php");

$id = $_POST['id'];
$password = $_POST['password'];

$query="SELECT * FROM pilot WHERE id='$id'";
$pilot=mysql_query($query) or die("Could not execute Query");
$row=mysql_fetch_row($pilot);
if(!(md5($password) == $row['password'])) {
die ("Wrong Password");
} else {
die("User does not exist");
}
?>
Welcome <?php echo $id; ?>
<?php
include("include/footer.php");
?>

"