Authentication using username and password...

[meenakshidhar]

hello friends...
i want one authentication form..when user put his username and password, it will check his username and password from mysql database...if the information is correct, the next page will be displayed....
here's my coding...

<?php

if ((!$username ) and (!$password)) {

header(&quot;location:

http://localhost/meenakshi/login1.html&quot;);

exit;
}

$db_name=&quot;meenakshi&quot;;

$table_name=&quot;authentication&quot;;
$connection=@mysql_connect( &quot;localhost&quot;, &quot;vivek&quot;, &quot;tarun150&quot; )
or die ( &quot;Unable to connect to server.&quot; );

$db=@mysql_select_db( $db_name,$connection )
or die ( &quot;Unable to select database.&quot; );



$sql = &quot;SELECT * FROM $table_name WHERE
username = \&quot;$username\&quot; AND
password = password(\&quot;$password\&quot&quot;;




$result =@mysql_query($sql)
or die(&quot;Unable to execute query.&quot;



$num = mysql_numrows( $result );

if ( $num != 0 ) {

$msg=&quot;<p>congrats</p>&quot;;
}
else{
header(&quot;location:

http://localhost/meenakshi/one.html&quot;);

exit;
}
?>

Can anybody plss help me...
thanks in advance...

 

[Broccoli2]

Looks fine to me, but you will need to replace 'localhost' with the full url if you want people to use this from anywhere other than your server. Also if I assume that your 'one.html' is the place to go to on successfully logging in then you need to rearrange your last few lines:

if ( $num != 0 ) {
  header("location:[URL unfurl="true"]http://yourdomain/meenakshi/one.html";);[/URL]
} else {
  header("location:[URL unfurl="true"]http://yourdomain/meenakshi/login1.html";);[/URL]
}
exit;

My only other concern is what method you are using to prevent someone just typing in the url of one.html, bypassing your authentication script entirely. Have you considered this?

-Rob

 

[Nukoi]

hi meena..
the way i have to stop people from going to a page without being logged in is, at the top of each page, have
<? php
session_start();
if(!$_SESSION['logged']){
header(&quot;location:

http://www.your_signin_page_here&quot;);

}

and in your user authentication script have

if ( $num != 0 ) {
$_SESSION['logged']=true;
header(&quot;location:

http://yourdomain/meenakshi/one.html&quot;;);

} else {
header(&quot;location:

http://yourdomain/meenakshi/login1.html&quot;;);

}


hope this helps.. i am a php newbie tho so there is probably a better way to do that.

take it easy
//jason