PHP Tutorials: Register & Login: User login (Part 2)

Part of the 'Register & Login' Project from PHP Academy. This tutorials walks you through how to process a username and password based login against details found in a database, set a session, and process a logout function.

Category:

Education

Tags:

• php
• programming
• tutorial
• tutorials
• help
• code
• learn
• teach
• mysql
• sessions
• login
• username
• password
• user
• pass
• database
• session

[Exrienz]

This is the full working code for this tutorial. Part I

<?php

$username = $_POST['username'];

$password =$_POST['password'];

if ($username&&$password)

{ $connect = mysql_connect("localhost","roo­t","") or die ("cannot connect to the database"); mysql_select_db("phpalex") or die("Couldn't find db"); $query = mysql_query("SELECT * FROM user1 WHERE username='$username'"); $numrows = mysql_num_rows($query); if ($numrows!=0) {

[fruitman89]

rihanna's ass keeps distracting me!!

[frankytap]

@helldrake77777 google for xamp if ur on windows and mamp if ur on mac. its a package that gives you a local server plus mysql database and phpmyadmin, free :)

[yasincoproductions]

@helldrake77777 no

[Kkoddy]

@doreto95

Try this,

put an $squery = mysql_query($query); // after de $query thing and after that modify while ($row = mysql_fetch_assoc($query))

with while ($row = mysql_fetch_assoc($squery))

[helldrake77777]

mysql*

[helldrake77777]

do i have to pay something 4 this locallhost and msql?

[PenguinDumbledore27]

This way has a MASSIVE security risk of SQL injections. Imagine this input for username/password:

'; DROP TABLE users; --

This would fail to log them in BUT delete all users in the table users.

You should add this before running it through the database:

$username = mysql_real_escape_string($user­name);

$password = mysql_real_escape_string($pass­word);

I know, it's not basic, but one should know dangers of SQL injections. It would also be good to md5 or sha1 all passwords. *complicates everything*

[doreto95]

why at 5:23 i get this error Warning: mysql_num_rows() expects parameter 1 to be resource, boolean given in D:\XAMPP\htdocs\website\login.­php on line 13

That user doesn't exist!

[ShadowRazoe]

i was getting wrong password error, so i started over, and for some reason it work.............started over back from tutorial part 1 and it works,

[xexoristo]

The 1 is not appearing on my screen nothing happened like before

[xexoristo]

@fruitman89 hahahaha i agree