Difference between revisions of "PHP Login"
From KOP KB
(→Setting up the First Page) |
|||
| Line 30: | Line 30: | ||
</tr> | </tr> | ||
</table> | </table> | ||
| + | </syntaxhighlight> | ||
| + | == Checking the Login == | ||
| + | <syntaxhighlight lang="php"> | ||
| + | <?php | ||
| + | |||
| + | $host="mysqlv105"; // Host name | ||
| + | $username="sgphplogin"; // Mysql username | ||
| + | $password="Sgphplogin1"; // Mysql password | ||
| + | $db_name="sgphplogin"; // Database name | ||
| + | $tbl_name="members"; // Table name | ||
| + | |||
| + | // Connect to server and select databse. | ||
| + | mysql_connect("$host", "$username", "$password")or die("cannot connect"); | ||
| + | mysql_select_db("$db_name")or die("cannot select DB"); | ||
| + | |||
| + | // username and password sent from form | ||
| + | $myusername=$_POST['myusername']; | ||
| + | $mypassword=$_POST['mypassword']; | ||
| + | |||
| + | |||
| + | // To protect MySQL injection (more detail about MySQL injection) | ||
| + | $myusername = stripslashes($myusername); | ||
| + | $mypassword = stripslashes($mypassword); | ||
| + | $myusername = mysql_real_escape_string($myusername); | ||
| + | $mypassword = mysql_real_escape_string($mypassword); | ||
| + | |||
| + | $checkpassword= md5($mypassword); | ||
| + | |||
| + | $sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$checkpassword'"; | ||
| + | $result=mysql_query($sql); | ||
| + | |||
| + | // Mysql_num_row is counting table row | ||
| + | $count=mysql_num_rows($result); | ||
| + | |||
| + | // If result matched $myusername and $mypassword, table row must be 1 row | ||
| + | |||
| + | if($count==1){ | ||
| + | |||
| + | // Register $myusername, $mypassword and redirect to file "login_success.php" | ||
| + | session_register("myusername"); | ||
| + | session_register("mypassword"); | ||
| + | header("location:loggedin.php"); | ||
| + | } | ||
| + | else { | ||
| + | echo "Wrong Username or Password"; | ||
| + | } | ||
| + | ?> | ||
</syntaxhighlight> | </syntaxhighlight> | ||
Revision as of 22:17, 6 August 2014
Setting up the First Page
I name the file myself to mlogin.php but its mostly html thats the function. I made it php so if I needed to do anything with it I can
<table width="300" border="0" align="center" cellpadding="0" cellspacing="1" bgcolor="#CCCCCC">
<tr>
<form name="form1" method="post" action="clogin.php">
<td>
<table width="100%" border="0" cellpadding="3" cellspacing="1" bgcolor="#FFFFFF">
<tr>
<td colspan="3"><strong>Member Login </strong></td>
</tr>
<tr>
<td width="78">Username</td>
<td width="6">:</td>
<td width="294"><input name="myusername" type="text" id="myusername"></td>
</tr>
<tr>
<td>Password</td>
<td>:</td>
<td><input name="mypassword" type="text" id="mypassword"></td>
</tr>
<tr>
<td> </td>
<td> </td>
<td><input type="submit" name="Submit" value="Login"></td>
</tr>
</table>
</td>
</form>
</tr>
</table>
Checking the Login
<?php
$host="mysqlv105"; // Host name
$username="sgphplogin"; // Mysql username
$password="Sgphplogin1"; // Mysql password
$db_name="sgphplogin"; // Database name
$tbl_name="members"; // Table name
// Connect to server and select databse.
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");
// username and password sent from form
$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];
// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);
$checkpassword= md5($mypassword);
$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$checkpassword'";
$result=mysql_query($sql);
// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row
if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
session_register("myusername");
session_register("mypassword");
header("location:loggedin.php");
}
else {
echo "Wrong Username or Password";
}
?>
