Forum Moderators: coopster
<?php
$tbl_name="users"; // Table name
// Connect to server and select database.
require_once("Connections/connection.php"); // Connection to the server
session_start();
$userid = $_POST['userid'];
$password = $_POST['password'];
$submitted = $_POST['submitted'];
if ($userid && $password){
/////////////////////////////////////////////////////////////////////////
$query = sprintf("SELECT * FROM users WHERE username='$userid' and password='$password'");
$result = @mysql_query($query);
$rowAccount = @mysql_fetch_array($result);
/////////////////////////////////////////////////////////////////////////
}
if ($rowAccount){
$_SESSION['id'] = $rowAccount['username'];
header("location:index.php");
exit;
}elseif($submitted){
echo "Incorrect username or password";
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<link rel="stylesheet" type="text/css" href="css/stylesheet.css">
<title>Owner Login</title>
</head>
<body>
<div id="wrapper">
<div id="container">
<div id="header">
<div id="user_box">
<?php
//if($id!=""){
//echo 'Logged in as: '. $rowAccount['username'];
//echo '<input type="button" name="Button" value="Logout" onclick="document.location.href=\'logout.php\'"/>';
//}
if(isset($_SESSION['id']) && !empty($_SESSION['id'])){
echo "<font color='white'>" . 'You are already logged in' . "</font>";
echo '<input type="button" name="logout" value="Logout" onclick="document.location.href=\'logout.php\'"/>';
}
//else{
//}
?>
</div>
<?php
$tbl_name="users"; // Table name
// Connect to server and select database.
require_once("Connections/connection.php"); // Connection to the server
session_start();
$userid = $_POST['userid'];
$password = $_POST['password'];
$submitted = $_POST['submitted'];
if ($userid && $password){
/////////////////////////////////////////////////////////////////////////
$query = sprintf("SELECT * FROM users WHERE username='$userid' and password='$password'");
$result = @mysql_query($query);
$rowAccount = @mysql_fetch_array($result);
/////////////////////////////////////////////////////////////////////////
}
//Array to store validation errors
$errmsg_arr = array();
//Validation error flag
$errflag = false;
//Input Validations
if($userid == '') {
$errmsg_arr[] = 'Username missing';
$errflag = true;
}
if($password == '') {
$errmsg_arr[] = 'Password missing';
$errflag = true;
}
//If there are input validations, redirect back to the login form
if($errflag) {
$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
session_write_close();
header("location: login.php");
exit();
}
if($rowAccount) {
if(mysql_num_rows($result) == 1) {
$member = mysql_fetch_assoc($rowAccount);
$_SESSION['ID'] = $member['id'];
$_SESSION['USERNAME'] = $member['username'];
header("location:index.php");
exit();
}else {
//Login failed
$errmsg_arr[] = 'Username or Password incorrect ';
$errflag = true;
}
if($errflag) {
$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
session_write_close();
header("location: login.php");
exit();
}
}else {
die("Query failed");
}
?>
<?php
if(!isset($_SESSION['ID']) || (trim($_SESSION['ID']) == '')) {
header("location: access-denied.php");
exit();
} elseif(isset($_SESSION['id']) && !empty($_SESSION['id'])){
echo "<font color='white'>" . 'You are already logged in as '{$_SESSION['USERNAME']} . "</font>";
echo '<input type="button" name="logout" value="Logout" onclick="document.location.href=\'logout.php\'"/>';
}
?>
<?php
session_start();
error_reporting(E_ALL|E_STRICT);
// Connect to server and select database.
require_once("Connections/connection.php"); // Connection to the server
$tbl_name="users"; // Table name
$userid = $_POST['userid'];
$password = $_POST['password'];
//$submitted = $_POST['submitted'];
if ($userid && $password){
/////////////////////////////////////////////////////////////////////////
$query = sprintf("SELECT * FROM users WHERE username='$userid' and password='$password'");
$result = @mysql_query($query);
$rowAccount = @mysql_fetch_array($result);
/////////////////////////////////////////////////////////////////////////
}
//=================== Suggested Code ==============================
//Array to store validation errors
$errmsg_arr = array();
//Validation error flag
$errflag = false;
//Input Validations
if($userid == '') {
$errmsg_arr[] = 'Username missing';
$errflag = true;
}
if($password == '') {
$errmsg_arr[] = 'Password missing';
$errflag = true;
}
//If there are input validations, redirect back to the login form
if($errflag) {
$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
session_write_close();
echo header("location: login.php");
exit();
}
if($rowAccount) {
if(mysql_num_rows($result) == 1) {
$member = mysql_fetch_assoc($rowAccount);
$_SESSION['ID'] = $member['id'];
$_SESSION['USERNAME'] = $member['username'];
header("location:index.php");
exit();
}else {
//Login failed
$errmsg_arr[] = 'Username or Password incorrect ';
$errflag = true;
}
if($errflag) {
$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
session_write_close();
header("location: login.php");
exit();
}
}else {
die("Query failed");
}
//=================== Really Old Code ==========================
//if ($rowAccount){
//$_SESSION['id'] = $rowAccount['username'];
//header("location:index.php");
//exit;
//}elseif($submitted){
//echo "Incorrect username or password";
//}
//======================== End ==================================
?>
<?php
if(!isset($_SESSION['ID']) || (trim($_SESSION['id']) == '')) {
header("location: access-denied.php");
exit();
}else{
if(isset($_SESSION['id']) && (!empty($_SESSION['id']))){
echo "<font color='white'>" . 'You are already logged in as '{$_SESSION['USERNAME']} . "</font>";
echo '<input type="button" name="logout" value="Logout" onclick="document.location.href=\'logout.php\'"/>';
}
//========================================== Old Code =======================================================
//if($id!=""){
//echo 'Logged in as: '. $rowAccount['username'];
//echo '<input type="button" name="Button" value="Logout" onclick="document.location.href=\'logout.php\'"/>';
//}
//if(isset($_SESSION['id']) && !empty($_SESSION['id'])){
//echo "<font color='white'>" . 'You are already logged in' . "</font>";
//echo '<input type="button" name="logout" value="Logout" onclick="document.location.href=\'logout.php\'"/>';
//}
//============================================= End =========================================================
?>
//If there are input validations, redirect back to the login form
if($errflag) {
$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
session_write_close();
echo header("location: login.php");
exit();
}