Mysql / PHP Dummy question ...

Anon

Hi ,

I tryng here to make my php read from a mysql database the username and password and then send the user to some page that i want .

Then i create the database called "mytest" into SQL with 5 fields.

1 - ID
2 - username
3 - password
4 - company
5 - area

I make a php login page where the use can enter his name and password .
After that we is sent to another one if the login/pass are correct . Ok that easy .

Now how can i put into the same php login page to check too company ?

I try this :

$sql = "Select $useridField from $userTable where $useridField='$Username' and $passwdField='$Password'
and $companyField='$company'";

What i'm looking for it's just a way to user in the login screen put his company too .
Then php will check " User + Login + company ". If correct he look the "area" field and send the user to there .
If not just send a error text .

With this i have 3 method of login because the user must put too the correct company where he belongs .

In the page of company i put a PHP script to check the userID and Company. If not the right one he send the user back to login screen . etc etc .

Can someone help here ??

Thanks .

yurko

🙂 since ur studying the PHP/MySQL thats good.

I would write it this way:
(NOT DEBUGGED)
$sql = "select $area from $userTable where
$useridField='$Username' and $passwdField=PASSWORD('$Password')
and $companyField='$company'";

//passwords muct be atleast hashed.
//Read some manuals about Password()
// function in mysql.

//I assume that "area" contains url where
//to redirect a user:
//all error cheking is skipped
$res = mysql_query($sql);
$arr = mysql_fetch_array($res);
$area = $arr[0];
if(!$area)$area = "http://where_to_send_unatorised_user.com";

//and now send the user to proper place
header("Location $area");
//END
?>

http://horobey.jlxlinux.com/

ze_lee

Yuriy has a good solution, but to me the most straightfoward solution is to run a query that tests for the condition (in this case, user+login+company) and also pulls back the redirect URL.

If one - and ONLY one - row is returned (supplied values for user, login and company are valid), redirect said user to the URL for this combo with the header("Location $area") statement. (NOTE: Fail if more than one row is returned, as this is some application/db update flaw -- should be a unique user/pw/company, correct?)

If now rows are returned, fail elegantly, by displaying a generic error message saying "improper credentials" or whatever.

Anon

It's amazing , i take a lot of time , trying to figure out and it's simple =).

Hey thanks for the light people , just another question where i find good source (books or manuals) that show me all this stuff using PHP+Mysql ??

Thanks for helping =).

Carlos .