I am trying another password change coding. but it gives "Your loginName and password do not match our records" always. pls provide me for the complete codes for "changepw1.php" because i am doing urgent project in my institute. I will attached all files in below. (this coding i abstracted from Internet)
MySQL table
CREATE TABLE users (
UserID INT(25) NOT NULL AUTO_INCREMENT PRIMARY KEY ,
Username VARCHAR(65) NOT NULL ,
Password VARCHAR(32) NOT NULL ,
EmailAddress VARCHAR(255) NOT NULL
);
INSERT INTO users (Username, Password) VALUES ('tissam','1990');
databaseconnectinfo.php
<?php
$db_host = "localhost";
$db_user = "root";
$db_password = "user";
$db_database = "pass";
$dbc = mysql_connect($db_host, $db_user, $db_password) or die ('Non riesco a connettermi: ' . mysql_error());
$db_selected = mysql_select_db($db_database, $dbc) or die ("Errore nella selezione del database: " . mysql_error());
?>
changepw1.php
<?php
if (isset($_POST['submit'])) {
// Handle the form.
require_once ('databaseconnectinfo.php');
// Connect to the db.
// Create a function for escaping the data.
function escape_data ($data) {
global $dbc; // Need the connection.
if (ini_get('magic_quotes_gpc')) {
$data = stripslashes($data);
}
return mysql_real_escape_string($data, $dbc);
}
// End of function.
$message = NULL; // Create an empty new variable.
// Check for a loginName.
if (empty($_POST['Username'])) {
$lo = FALSE;
$message .= '<p>You forgot to enter your Login Name!</p>';
} else {
$lo = escape_data($_POST['Username']);
}
// Check for an existing password.
if (empty($_POST['Password'])) {
$pa = FALSE;
$message .= '<p>You forgot to enter your existing password!</p>';
} else {
$pa = escape_data($_POST['Password']);
}
// Check for a password and match against the confirmed password.
if (empty($_POST['password1'])) {
$npa = FALSE;
$message .= '<p>You forgot to enter your new password!</p>';
} else {
if ($_POST['password1'] == $_POST['password2']) {
$npa = escape_data($_POST['password1']);
} else {
$npa = FALSE;
$message .= '<p>Your new password did not match the confirmed new password!</p>';
}
}
if ($lo && $pa && $npa) { // If everything's OK.
$query = "SELECT UserID FROM users WHERE (Username='$lo' AND Password=PASSWORD('$pa') )";
$result = mysql_query ($query);
$num = mysql_num_rows ($result);
if ($num == 1) {
$row = mysql_fetch_array($result, MYSQL_NUM);
// Make the query.
$query = "UPDATE users SET Password=PASSWORD('$npa') WHERE id=$row[0]";
$result = @mysql_query ($query); // Run the query.
if (mysql_affected_rows() == 1) { // If it ran OK.
// Send an email, if desired.
echo '<p><b>Your password has been changed.</b></p>';
exit(); // Quit the script.
} else { // If it did not run OK.
$message = '<p>Your password could not be changed due to a system error. We apologize for any inconvenience.</p><p>' . mysql_error() . '</p>';
}
} else {
$message = '<p>Your loginName and password do not match our records.</p>';
}
mysql_close(); // Close the database connection.
} else {
$message .= '<p>Please try again.</p>';
}
} // End of the main Submit conditional.
// Print the error message if there is one.
if (isset($message)) {
echo '<font color="red">', $message, '</font>';
}
?>
<form action="<?php echo $_SERVER['PHP_SELF'];?>" method="post">
<fieldset><legend>Enter your information in the form below:</legend>
<p><b>Login Name:</b> <input type="text" name="Username" size="10" maxlength="20" value="<?php if (isset($_POST['Username'])) echo $_POST['Username'];?>" /></p>
<p><b>Current Password:</b> <input type="password" name="Password" size="100" maxlength="100" /></p>
<p><b>New Password:</b> <input type="password" name="password1" size="20" maxlength="20" /></p>
<p><b>Confirm New Password:</b> <input type="password" name="password2" size="20" maxlength="20" /></p>
</fieldset>
<div align="center"><input type="submit" name="submit" value="Change My Password" /></div>
</form>
