Parse error: parse error in C:\wamp\www\login.php on line 11

[Qwa]

Hello all.
I am having problem with login file. The code is below.

Error: Parse error: parse error in C:\wamp\www\login.php on line 11

<?php
error_reporting(E_ALL ^ E_NOTICE);
if(isset($_POST['login']))
$pass = md5($_POST['password']);
$_POST['nickass'] = addslashes($_POST['nickass']);
require"connect.php";
$check = mysql_query("SELECT * FROM USERS where nickass = '".$_POST['nickass']."'");
$chec2 = mysql_num_rows($check);
if($chec2 == 0){
print "Vartotojas neregistruotas"
// error is here	
}else{
while($infoUser = mysql_fetch_array($check)){
if($pass != $infoUser['password'])  {
print "Neteisingas slaptazodis";
}else{
$time = time()+ 3600;
setcookie(nickass,$_POST['nickass'],$time);
setcookie(pass,$pass,$time);
}

}

}
}

?>
<form action="login.php" method="post" /> 
Prisijungimo vardas: 
<input type="text" name="nickass" /><br> 
Slaptazodis: 
<input type="password" name="password" /><br>  

<input type="submit" name="login" value="Prisijungti"> 
</form> 

Whats wrong? Any help would be appreciated.

[White_Devil]

You forgot the ; after your print statement.

print "Neteisingas slaptazodis";    

[White_Devil]

sorry wrong line. It was this line...

print "Vartotojas neregistruotas"; 

[White_Devil]

there is a close } at the bottom also that needs to be removed. Also as a security note you should change

if(isset($_POST['login']))
to
if(isset(strip_tags($_POST['login'])))  

and 
$pass = md5($_POST['password']);
to
$pass = md5(strip_tags($_POST['password']));

[bradgrafelman]

White_Devil;10969234 wrote:

Also as a security note you should change

if(isset($_POST['login']))
to
if(isset(strip_tags($_POST['login'])))  

and 
$pass = md5($_POST['password']);
to
$pass = md5(strip_tags($_POST['password']));

I disagree, for a few reasons:

1. You can't call [man]isset/man on the result of a function - doesn't make sense even if you could. And besides, you're attempting to use $POST['login'] before checking if it was set anyway.
   

2. There's no reason to use [man]strip_tags/man on $_POST['login']. In fact, doing so could be detrimental depending upon the allowed values for $POST['login'].
   

3. There's no reason to call [man]strip_tags/man on $_POST['password']. In fact, doing so could be detrimental since you're altering the password before computing it's MD5 hash, meaning that it could be impossible to enter the correct password.

@: Some critiques on your code:

1. [man]addslashes/man should never be used to prepare data for a SQL query since it doesn't properly sanitize data. Instead, you should always use a DBMS-specific escaping function, such as [man]mysql_real_escape_string/man.

2. There's no reason to use a while() loop if you're only expecting at most one result.

3. You might want to start indenting your code to make it easier to read, especially if you decide ask others for help in the future. 🙂