thanx fumigator,
i have used it
result is not known yet as my login system as gone haywhere:mad:
please look at it
----login form
<h4>Login Form</h4>
<form name="lform" id="lform" method="post" action="authenticate.php">
<table >
<tr><td>
Username:
<input type="text" name="username" id="username" size="36" /></td>
<td> </td>
</tr>
<tr><td>
Password:
<input type="password" name="password" id="password" size="36" /></td><td> </td></tr>
<tr><td><input type="submit" name="lsubmit" id="lsubmit" value="Submit" align="right"/>
<input type="reset" name="lreset" id="lreset" value="Reset" /></td>
<td> </td>
</tr>
</table>
</form>
---authenticating script---
<?php
include('connection.php');
$username=$_POST['username'];
$password=$_POST['password'];
if (isset($submit)) // name of submit button
{
$query = "select (`username`,`password`) from users where username=\'$username\' and password=\'$password\'";
echo "select (username,password) from users where username='$username' and password='$password'";
$result = mysql_query($query) ;
$isAuth = false; //set to false originally
while($row = mysql_fetch_array($result))
{
if($row['username'] === $username)
//above row checks to see if username/password combination exists
{
$isAuth = true;
//session_start();
//session_register('username');
}
}
if($isAuth)
{
print "logged in successfully<br>";
print "<A href='index3.php'>Go to site</a>";
}
else
//if login/pass does not exist
{
print "Wrong username or password or you are not registered";
print " <a href='register2.php> Click to register</a>";
}
}
else
mysql_error();
?>
---register page---
<h4>Create User</h4>
<form name="register" id="register" method="post" action="?id=register">
<table >
<tr><td>
Username:
<input type="text" name="username" id="username" size="36" /></td>
<td> </td>
</tr>
<tr><td>
Password:
<input type="password" name="password" id="password" size="36" /></td><td> </td></tr>
<tr><td>Email
<input type="text" name="email" id="email" size="41" /></td>
<td> </td>
</tr>
<tr><td><input type="submit" name="usubmit" id="usubmit" value="Submit" align="right"/>
<input type="reset" name="ureset" id="ureset" value="Reset" /></td>
<td> </td>
</tr>
</table>
</form>
<?php
if(empty($_POST['username'])){
echo "Please, insert an username.<br>
<a href=?id=register>Go Back</a>.";
die();
}
if(empty($_POST['password'])){
echo "Please, insert a password.<br>
<a href=?id=register>Go Back</a>.";
die();
}
if(empty($_POST['email'])){
echo "Please, insert an email.<br>
<a href=?id=register>Go Back</a>.";
die();
}
include('connection.php');
//checking and filtering input from user
$_POST['username']=trim($_POST['username']); // this trims intial or end white spaces a user might put
$_POST['password']=trim($_POST['password']);
$_POST['email']=trim($_POST['email']);
/*if(!$_POST['username']|| !$_POST['password'])
{
echo '<h4>You have not entered complete information. Please try again.</h4>';
exit;
}*/
if (isset($_POST['usubmit']))
{
//handling of quotes and backslashes in text
if(!get_magic_quotes_gpc())
{
$_POST['username'] =addslashes($_POST['username']);
$_POST['password']=addslashes($_POST['password']);
$_POST['email']=addslashes($_POST['email']);
}
}
//querying the database
//$insert_query="INSERT INTO users (username, password,email) VALUES('".mysql_escape_string($_POST['username'])."','".mysql_escape_string($_POST['password'])."','".mysql_escape_string($_POST['email']."')";
$insert_query="INSERT INTO marks (username, password,email) VALUES('".mysql_escape_string($_POST['username'])."','".mysql_escape_string($_POST['password'])."','".mysql_escape_string($_POST['email']."')";
$result=mysql_query($insert_query);
if($result)
echo mysql_affected_rows($myConn).'row(s) <br>feedback is correctly posted, thank you';
else
echo "something amidst";
//closing the connection
mysql_close();
?>
Thanks