Login Help

[Thomas_P]

Hi, I am very new to PHP and so far I must admit that I like it 🙂

However I'm having some difficulty with one little issue and any help would be appreciated.

Here is my code (Borrowed and modified by myself for my needs)

<?php

include("config.php"); 

$link = mysql_connect($server, $db_user, $db_pass)
or die ("Could not connect to mysql because ".mysql_error());

mysql_select_db($database)
or die ("Could not select database because ".mysql_error());

$match = "select id from $table where username = '".$_POST['username']."'
and password = '".$_POST['password']."';"; 

$qry = mysql_query($match)
or die ("Could not match data because ".mysql_error());
$num_rows = mysql_num_rows($qry); 

if ($num_rows <= 0) { 
header("Location: http://www.corkboot.net/index.html");
exit; 
} else {

setcookie("loggedin", "TRUE", time()+(3600 * 24));
setcookie("mysite_username", "$username");
header("Location: http://www.corkboot.net/members.html");
}
?>

So this code actually does what I want it to do, it automatically forwards failed passwords back to the index and forwards successes to the members. However in doing this I have no way of informing the user of their failed login, it just reloads the page. I know that using header means that it has to be the first thing sent to browser (I am correct in this, right?) so is there a way to send extra data with the header to allow the user to know the login failed?

I have an idea to simply make an exact copy of index.html and call it indexfailed.html and simply add some extra text to the login box stating that login failed but that seems like a duct tape solution, I would really prefer to learn to code it properly.

Thanks so much

Thomas

[tron00]

You could put it in your URL string after ?:

header("Location: http://www.corkboot.net/index.php?login=failed");

First, the page you are sending the user back to in the event of a failed login, needs to be a PHP page not HTML.

On the page you redirect your user to, you can use $_GET[]. In this example, it would be "login":

$login = $_GET['login']; which would be ($login = "failed");

At this point, you can handle your error appropriately.

[Thomas_P]

Thanks for the input, My problem is getting used to creating .php pages (old habits die hard right) Anyways I appreciate the info.