[RESOLVED] Sessions Problem

[Dada78]

I tried to log in and it doesn't log in and go to the user.php I am not sure what to do next or what is wrong.

You can try to test this at

http://www.mesquitechristmas.com/local/login.php

email: [e-mail]
password: 22250916

All it does it refresh with no error

Here is the code.

<?php

include ('db_connect.php');

if (isset($_POST['submit']))
{
    if ($_POST['email'] == "" || $_POST['password'] == "")
    {
      echo "it enters the missing fields box";
        $error = 'Please fill in all fields.';  // here, they have not filled in either the username OR the password.  Set an error.
    }
    else
    {

  // email and password sent from signup form
  $email=$_POST['email'];
  $password=$_POST['password'];

  $sql="SELECT * FROM users WHERE email='$email' and password='$password'";
  $result=mysql_query($sql);

  // Mysql_num_row is counting table row
  $count=mysql_num_rows($result);
  // If result matched $email and $password, table row must be 1 row

  if($count==1)
  {
     // Register $email, $password and redirect to file "user.php"
     $_SESSION['hasLoggedIn'] = 1;

  //get the users id that is associated with him
   $SQL2 = "SELECT * FROM users WHERE email='$email'";
   $result2 = mysql_query($SQL);
   $row = mysql_fetch_assoc($result);

   //store the id in the session for use
       $_SESSION['userID'] = $row['id'];

     session_register("email");
     session_register("password");
     header("location:user.php");
  }
   }
}
?>

-Thanks

[Sanoz0r]

u need the following at the very top of your page

session_start();

[Dada78]

I thought that only needed to be on top of the page you wanted secure to use sessions on? This is the login page so it shouldn't need this does it?

[Dada78]

I tried that and it still didn't work....

[Sanoz0r]

Oh ye, sorry, u don't need that just yet 😛

[Dada78]

Ok I have figured out what my problem is I am just not sure how to fix it. Since when you register the password is entered into the database as MD5. So when you log in it needs to set as MD5 before the password on the login page. I am just not sure which password to put it in front of and how exactly. I have tried a few different ways but have failed

Here is the code for the login page

<?php

session_start(); 

include ('db_connect.php');

if (isset($_POST['submit']))
{
    if ($_POST['email'] == "" || $_POST['password'] == "")
    {

    $error = 'Please fill in all fields.';  // here, they have not filled in either the username OR the password.  Set an error.
}
else
{

  // email and password sent from signup form
  $email=$_POST['email'];
  $password=$_POST['password'];

  $sql="SELECT * FROM users WHERE email='$email' and password='$password'";
  $result=mysql_query($sql);

  // Mysql_num_row is counting table row
  $count=mysql_num_rows($result);
  // If result matched $email and $password, table row must be 1 row

  if($count==1)
  {
     // Register $email, $password and redirect to file "user.php"
     $_SESSION['hasLoggedIn'] = 1;

  //get the users id that is associated with him
   $SQL2 = "SELECT * FROM users WHERE email='$email'";
   $result2 = mysql_query($SQL);
   $row = mysql_fetch_assoc($result);

   //store the id in the session for use
       $_SESSION['userID'] = $row['id'];

     session_register("email");
     session_register("password");
     header("location:user.php");
  }
   }
}
?>

-Thanks

[Poolie]

Replace:

$sql="SELECT * FROM users WHERE email='$email' and password='$password'";

With:

$sql="SELECT * FROM users WHERE email='$email' and password='" . md5($password) . "'";

🙂

[Dada78]

Thank you that did the trick...