Problems with Firefox browser

iia86

Hei,

I'm developing a system.And theres an user account system in it and users can login to their accounts.Everything works just fine in IE and in Opera browsers.Everything is alright with Firefox aswell BUT in the login page it just messes up.Even if the user gives the correct username and password the logic forwards to the error page that I made to be forwarded to when the username and password doesnt match.

But things are alright in IE and in Opera browsers.Just when Im testing it with firefox then I faced this strange problem.

Here's the code to the login script,

<?php

$connection = mysqli_connect("localhost","root","");

mysqli_select_db($connection,"uvdb");

$query = "SELECT pwd FROM db WHERE uname='$_POST[username]'";

$result = mysqli_query($connection,$query);

$array = mysqli_fetch_array($result);

if($_POST[pwd] == $array[pwd])
{
echo '<html>';
echo '<head>';
echo '<meta http-equiv="refresh" content="0 ; url=s_login.html"/>';
echo '</head>';
echo '</html>';
}

else

echo '<html>';
echo '<head>';
echo '<meta http-equiv="refresh" content="0 ; url=err_login.html"/>';
echo '</head>';
echo '</html>';

?>

Hope you guys can help me.

Peace.

greensweater

missing quotes in:

if($_POST['pwd'] == $array['pwd'])

also never use raw user input in a DB query:

$query = "SELECT pwd FROM db WHERE uname='".mysql_real_escape_string($_POST['username'])."'";

iia86

Umhh.. that quote thing doesn't seem to be much of a problem.Because, I changed that and tried & the result was the same,everything goes fine in Opera & in IE but the same problem in Firefox.

Is there some problem in how Firefox interacts with PHP?Or something like that?Then why the same code would work fine for other browsers & messup in Firefox?

And thanks for the security tip about mysql query.Would be great if you can give me some more security tips.I'm kinda new in php/mysql programming.

bradmasterx

Not all meta tags work in firefox so use this:

<?php

$connection = mysqli_connect("localhost", "root", "", "uvdb");


$query = "SELECT pwd FROM `db` WHERE uname='$_POST[username]'";

$result = mysqli_query($connection,$query);

$array = mysqli_fetch_array($result);

if($_POST[pwd] == $array[pwd])
{
header("location: s_login.html");
}

else {

header("location: err_login.html");
}
?>

Horizon88

For the security tips, I always recommend http://php.robm.me.uk . As to the first part of your post, Firefox wouldn't interact with PHP differently, because PHP gets processed on the server, not on the client. I'd guess it's something with your meta header redirects that Firefox doesn't like. You could try using the header() function to get the same functionality without using meta redirects (which are bad for search engine rankings, I hear, so you may want to consider not using them elsewhere, if you do)

Edit: Garrgh! You beat me! I blame the small keys on these school laptops. How am I supposed to answer PHP questions in a timely fashion while sitting in class if they give me this tiny laptop? >:0

iia86

Ahh ! Now I know ! 🙂 And it works.

Thanks a lot guys.

Peace.

bradgrafelman

Also note that the added quotes did change something - they got rid of incorrect syntax from your code (turn display_errors On and set error_reporting to E_ALL and try to access an array element like that without quotes).

Don't forget to mark this thread resolved.

EDIT: Just out of curiosity... what happens if someone simply bookmarks the s_login.html page instead of the login page itself? :p