Admin login problem

[lucgeme]

Hello. I have a problem with login into the admin panel. Here are the scripts involved to this procedure. Also you have a picture with the admin table.
admin.login.php

<?php 
	include('lib/config.inc.php');
	class Login{
		var $query;
		function Login($idFld, $usernameFld, $passwordFld, $tbl, $usernameVar, $passwordVar){
			$con = new Connection(MYSQL_HOST, MYSQL_USER, MYSQL_PWD, MYSQL_DB);
			$this->query = 'select 
								'.$idFld.', '.$usernameFld.' 
							from 
								'.$tbl.' 
							where 
								'.$usernameFld.' = "'.$usernameVar.'" and '.$passwordFld.' = MD5("'.$passwordVar.'")';

		Login::checkUser();
	}
	function checkUser(){
		$sql = new Query($this->query);
		print $sql->err;
		if($sql->rows != 0){
			$_SESSION['loggedUser']['id'] = $sql->resultArray[0][0];
			$_SESSION['loggedUser']['username'] = $sql->resultArray[0][1];
			header('location: admin.index.php');
		}else{
			header('location: index.php?err=1');
		}
	}
}
$c = new Login('id', 'username', 'password', 'admin', $_POST['username'], $_POST['password']);
?>

config.inc.php

<?php 
	//MYSQL DATA
	include('mysql.data.php');

//GLOBALS
define('CLASS_DIR', 'lib/classes/');
define('CSS_DIR', 'lib/css/');
define('TPL_DIR', 'lib/tpl/');
define('GFX_DIR', 'lib/gfx/');
define('MODULE_DIR', 'lib/mods/');
define('USER_PHOTO_DIR', 'images/');

session_name(md5('USER_SESSION'));
session_start();

include('libs.php');
?>

mysql.data.php

<?php
        define('MYSQL_HOST', 'localhost');
        define('MYSQL_USER', 'luci');
        define('MYSQL_PWD', 'parola');
        define('MYSQL_DB', 'masini');
?>

http://uploadimage.ro/images/22771091011925998819.jpg

[NogDog]

So, what is the problem?

[lucgeme]

I can't login to the administration panel, although the username and password are right.

[lucgeme]

Admin user is created in the database with the name "admin" and the password is encrypted in MD5 protocol as you can see in the picture, but i can't login. Anyone knows why?

[NogDog]

Try echoing out $this->query after you define it in the first file, and see if it looks correct and matches the expected input data. You can try copy-and-pasting it directly into MySQL to see if you get the expected results. If you haven't done so, it may help debugging to make sure all error reporting is turned on for now, e.g.:

<?php
ini_set('display_errors', true); // change to false for production version
error_reporting(E_ALL);

[lucgeme]

NogDog;10987581 wrote:

Try echoing out $this->query after you define it in the first file, and see if it looks correct and matches the expected input data. You can try copy-and-pasting it directly into MySQL to see if you get the expected results. If you haven't done so, it may help debugging to make sure all error reporting is turned on for now, e.g.:

<?php
ini_set('display_errors', true); // change to false for production version
error_reporting(E_ALL);

<?php 
	include('lib/config.inc.php');
	class Login{
		var $query;
		function Login($idFld, $usernameFld, $passwordFld, $tbl, $usernameVar, $passwordVar){
			$con = new Connection(MYSQL_HOST, MYSQL_USER, MYSQL_PWD, MYSQL_DB);
			echo $this->query;
...

Nothing happens. No message, nothing:queasy:

[NogDog]

You want to echo it after you define the actual query string you're going to use, e.g.:

<?php 
   include('lib/config.inc.php');
   class Login{
      var $query;
      function Login($idFld, $usernameFld, $passwordFld, $tbl, $usernameVar, $passwordVar){
         $con = new Connection(MYSQL_HOST, MYSQL_USER, MYSQL_PWD, MYSQL_DB);
         $this->query = 'select 
                        '.$idFld.', '.$usernameFld.' 
                     from 
                        '.$tbl.' 
                     where 
                        '.$usernameFld.' = "'.$usernameVar.'" and '.$passwordFld.' = MD5("'.$passwordVar.'")';
         // DEBUG, comment out after confirming query is correct
         echo $this->query;
         // END DEBUG
         Login::checkUser();
      }
      function checkUser(){
         $sql = new Query($this->query);
         print $sql->err;
         if($sql->rows != 0){
            $_SESSION['loggedUser']['id'] = $sql->resultArray[0][0];
            $_SESSION['loggedUser']['username'] = $sql->resultArray[0][1];
            header('location: admin.index.php');
         }else{
            header('location: index.php?err=1');
         }
      }
   }
   $c = new Login('id', 'username', 'password', 'admin', $_POST['username'], $_POST['password']);
?>

[lucgeme]

Still nothing. No messages appear. Header is this location " index.php?err=1 "

[Derokorian]

Comment out your header location calls, so you can see the output from the debug echo.