still having troubles, please help.

Anon

Hello,

I'm still working on my admin CP and everything, but lately, I just can't seem to get this fixed. Basically, I have a form witch asks for the username and password, then it goes to "check.php" and if the password matches with the database info, you are cookied and re-directed to the admin CP. if not, text is displayed saying the login was unsuccessful. My problem is the my code does'nt seem to be getting the info from the database. The name of the variables for the username and password from the for are $user and $password.

This is the code I have for check.php, I get no errors, but I even tried echoing $password_check and it shows nothing.

<?php
$db_name = "novaz3rodb";
$connect = mysql_connect('localhost','login','password');
$db = mysql_select_db($db_name,$connect);

$query1 = mysql_query("SELECT password FROM adminlogin WHERE username = '$user'", $connect);
$row = mysql_fetch_array($query1);
$password_check = $row['password'];

if ($password_check == $password)
{
header("Location: http://novaz3ro.com/admincp.php");
exit;
}
else
{
echo "Login unsuccessful, please try again";
}
?>

thanks for all your time

zhabala

Should not it look like

$password_check = $row["password"];

instead of

$password_check = $row['password'];

Zdenek

Anon

Submit your form through GET method and read the query string wheather your username or password is being submitted or not. there must be some some small problem with your form tag or your your variables.

check it carefully

Tabish

Anon

First things first, I would do some error checking our your DB connection.

if (!$connect) { echo "damn."; }

Next echo your SQL statement to make sure there's no errors. Like missing varibles (just a hunch).

If you are missing variables read here on how to access them: http://www.php.net/manual/en/reserved.variables.php#reserved.variables.get

Anon

Your problem is that you never really connected to the database.

Right now, Im guessing that you accidently turned the DB connection command into a variable ($db).

So heres what you should do:

replace

$db = mysql_select_db($db_name,$connect);

with

mysql_select_db($db_name,$connect);

that should fix your problem. Everything else should be fine, and also, I don't think its necissary to make the $connect for every query.

Anytime - Superbronx