What is wrong with this code?

naked

Warning: fopen(/home/content/k/s/r/ksrhostadmin/html\login\passwords.txt): failed to open stream: No such file or directory in /home/content/k/s/r/ksrhostadmin/html/login/engine.php on line 13

Warning: feof(): supplied argument is not a valid stream resource in /home/content/k/s/r/ksrhostadminhtml/login/engine.php on line 16

Warning: fgets(): supplied argument is not a valid stream resource in /home/content/k/s/r/ksrhostadmin/html/login/engine.php on line 20

<?php
  session_start();
  session_register("GoBack_session");

// Connects and opens the text file
// DATA FORMAT IN TEXT FILE= "username<SPACE>password"

// $MyFileObject is of type "Scripting.FileSystemObject"
$MyTextFile=fopen($DOCUMENT_ROOT."\\login"."\\passwords.txt","r");

// Scan the text file to determine if the user is legal
while(!feof($MyTextFile))
{

// If username and password found
  if (fgets($MyTextFile)==$_POST["username"]." ".$_POST["password"])
  {

// Close the text file
    fclose($MyTextFile);
// Go to login success page
    $_SESSION['GoBack']=$_SERVER["SCRIPT_NAME"];
    header("Location: "."/login/download.php");
    exit();

  } 

} 

// Close the text file
fclose($MyTextFile);
// Go to error page if login unsuccessful
$_SESSION['GoBack']=$_SERVER["SCRIPT_NAME"];
header("Location: "."/signup.php");
exit();
?>

bradgrafelman

Try using forward slashes instead of backslashes in your path since your server is running a Unix-based OS.

EDIT: Also, doesn't seem very safe to store the password in a plain text file... what if someone were to view this file in their browser?

rsmith

$MyTextFile=fopen($DOCUMENT_ROOT."\\login"."\\passwords.txt","r");

Should be:

$MyTextFile = fopen($_SEVER['DOCUMENT_ROOT']."/login/passwords.txt","r");

naked

Now it gives an fgets error on line 9, 12 and 16.

bradgrafelman

Can you show us your code now as well as all error messages outputted? Also, try echo'ing out the path portion of the fopen() call and visually inspecting it - does it look correct?