Major PHP/MySQL Login Project, with session variables -
alright, past 2 days, i've been scouring internet , trying best put rather sophisticated login system. i've got core of working, users can sign up, , login. i'm not new simple php , mysql, when comes in-depth code i'm lost. want have users enter login, have verified (obviously) , have done, redirected members page displays information pertaining username/account only. i've registered session variables on checklogin.php (the file verify log in's, please below), life of me cannot variables passed actual members page. figured i'd start easy. i'd try , transfer username , display welcome message "hello there, [username used login here]. cannot far. can me out? once this, can go there.
login form (just snippet):
<form class="form-signin" role="form" method="post" action="checklogin.php"> <center><img src="logo.png" style="padding-bottom: 10px;"></center> <input type="text" name="myusername" id="myusername" class="form-control" placeholder="email address" required autofocus><br> <input type="password" name="mypassword" id="mypassword" class="form-control" placeholder="password" required> <br> <button class="btn btn-lg btn-primary btn-block" name="submit" type="submit">sign in</button> </form>
check login
<?php session_start(); $host="localhost"; // host name $username="username"; // mysql username $password="********"; // mysql password $db_name="joinfbla_services"; // database name $tbl_name="members"; // table name // connect server , select databse. mysql_connect("$host", "$username", "$password")or die("cannot connect"); mysql_select_db("$db_name")or die("cannot select db"); // define $myusername , $mypassword $myusername=$_post['myusername']; $mypassword=$_post['mypassword']; // protect mysql injection (more detail mysql injection) $myusername = stripslashes($myusername); $mypassword = stripslashes($mypassword); $myusername = mysql_real_escape_string($myusername); $mypassword = mysql_real_escape_string($mypassword); $sql="select * $tbl_name username='$myusername' , password='$mypassword'"; $result=mysql_query($sql); // mysql_num_row counting table row $count=mysql_num_rows($result); // if result matched $myusername , $mypassword, table row must 1 row if($count==1){ // register $myusername, $mypassword , redirect file "login_success.php" $_session['myusername'] = $_post['myusername']; $_session['mypassword'] = $_post['mypassword']; echo '<meta http-equiv="refresh" content="1;url=http://joinfbla.com/2014/members/services.php">'; } else { echo "wrong username or password"; } ?>
members page:
<div class="col-md-4"> <div class="panel panel-primary"> <div class="panel-heading">hello, <?php session_start(); echo $_session['user']?>!</div> <div class="panel-body"> <u><b>baa username:</b></u> [insert php/mysql here] <br> <u><b>baa password:</b></u> [insert php/mysql here] <br> <u><b>point's recorded:</b></u> [insert php/mysql here] <br> <div class="alert alert-warning">note: seniors points year, if field blank not fear.</div> </div> </div> <div class="panel panel-primary"> <div class="panel-heading">this month in fbla!</div> <div class="panel-body"> [insert gcalendar here] </div> </div> </div>
just 1 thing noticed right away, might not solve problem:
echo $_session['user']
should be
echo $_session['myusername']
Comments
Post a Comment