can i put a .php include in a .html file, or do they both have to be .php... oh and i did get some success lol...
I used this to login
PHP Code:
$link = mysql_connect('localhost', 'USER', 'PWD');
if (!$link) {
die('Could not connect: ' . mysql_error());
}
echo 'Connected successfully';
and it came up with - Connected successfully on my page. so thats good.(i changed UN and PWD obviously)
so i added your code.. i got this
PHP Code:
<?php
$link = mysql_connect('localhost', 'USER', 'PWD');
if (!$link) {
die('Could not connect: ' . mysql_error());
}
echo 'Connected successfully';
$username = mysql_real_escape_string($_POST['username']);
$password = md5($_POST['password']);
$rs = mysql_query("SELECT * FROM `users` WHERE `uname`='{$uname}' AND `pword`='{$password}'");
if(mysql_num_rows($rs)){// one or more rows
$userInfo = mysql_fetch_assoc($rs);
$_SESSION['user'] = $userInfo['userId'];// get the users ID
echo "now logged in as {$userInfo['uname']}";
}else{// no rows
echo "Username or password incorrect.";
}
mysql_close($link);
?>
and that dosn't work. I need some learner stickers /!\
It looks good, a login screen, click login and it connects to the database, just getting the second issue,
Code:
Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/BLA/public_html/PODs/password_protect.php on line 15
Username or password incorrect.
But i think this is because i have not added the first bit of code you gave me.. working on it.
<?php
class updated_utility_1 extends utility {
/**
* Returns true if .htaccess and .htpasswd files generated.
* NOTE: This function generates .htaccess and .htpasswd files to protect files or complete folder.
* using fopen, fwrite(), crypt()
*
* @param $folderPathForSecureFiles; path relative to root for secure files like "mysite/secureddata",
* $folderPathForPasswordFile; path relative to root where .htpasswd file will be stored like "mysite",
* $secureFileNamesCommaSeperated; files to be secured use comma to seperate multiple files, leave blank if want to secure complete folder,
* $username; username used to login into secured area,
* $password; password used to login into secured area
*
* @access public
*
* @return creates .htaccess and .htpasswd file and if successfully created returns true
*/
} // end func am_generateHtaccessHtpasswdFile
} // End of Class
?>
If you have a server that can use .htaccess then it is very likely that the .htpasswd and .htgroups will also be supported.
This means that you can use a simple php script to add a set of login credentials in the .htpasswd and groups files and have the server provide that level of security for you.
The password protected folder would only allow the authorised users and the authetication infomation provided to the server will be available in PHP variables which you can use to test if needed.
This means that you can relax a bit on providing secure login pages as this task is now in the hands of the server.
Thanx JunkMale for your idea, I had thought of something like that, however, I have to add 10,000 users to the database, which are already in a spread sheet, so I can just transfer them across.
But in your example, I would need to individually create a folder username and password for each of them… lol I think id die hehe.
Hmm ok, i think im doing somthing wrong, do i need to log into SQLadmin using the root login... and if so how would i do this, cos it auto logs me in when i open it.
Reply With Quote
Originally Posted by Kirtangl
Bookmarks