08.10.2012, 11:18
I haven't tried this tutorial, but looks nice and you're explaining what to do in a nice and simple way!
Sorry to ruin the party here, but that script is not close to quality.
1. It's not up to the standard PHP provides today and it uses unsupported functions (such as mysql_*). The use of PDO is highly recommend as it increases speed, overall performance is 101% more secure. 2. Also the way sessions are handled needs to be fixed. 3. The HTML standard you use is also not recommend anymore. xHTML transitional should not be used over HTML 5. This is just a brief list of stuff that's wrong with this script. If I were you, I wouldn't use it. |
Should not use this anymore, its outdated.
I followed this tutorial when I made my UCP: http://www.youtube.com/watch?v=SCOPfzhGGVg It has 4 parts atm, some more is gonna come I think. |
Have you seen the post date? 17/10/2011. Of course it's gonna have problems with it, and I doubt the creator of the topic is going to resolve these issues: Last Activity: 24/08/2013.
|
<?php
include("config.php"); //including our config.php where is connecting to mysql...
session_start(); //starting session for profile.php (Dunno how to explain better) look little down
error_reporting(0); //without this we will always get some stupid notice that variable isn't defined....
$submit = $_POST['submit']; //variable for submit button, in this variable we save button that player press in <input type='submit' name="submit" value='Login' />....
$username = sanitize($_POST['username']); //variable for username, in this variable we save text that user type in <input type="text" name="username"....
$password = sanitize($_POST['password']); //variable for password, in this variable we save text that user type in <input type="password" name="password"....
if($submit) //if he press submit button
{
if($username && $password) //if he type both of username and password not just one of them
{
$query = mysql_query("SELECT username, password FROM users WHERE username = '$username'"); //selecting user name and password, change it to your field names, chage users to your table name, $username means username that he type...
if(mysql_num_rows($query) == 1) //if user exists
{
while($row = mysql_fetch_assoc($query)) //loop thought table that we select in mysql_query
{
$dbusername = $row['username']; //setting dbusername as variable from table, change 'username' to your field!
$dbpassword = $row['password']; //setting dbpassword as variable from table, change 'password' to your field!
}
if($username == $dbusername && $password == $dbpassword) //if username is same as one from table and if password is the same as one from table...
{
$_SESSION['username'] = $dbusername; //setting session username to one from table, this is useful if you login, that restart your browser and than you go in url where is your profile.php... Anyway this is useful :D
echo header('location: profile.php'); //redirecting user to his profile page (profile.php)
}
else echo "Wrong password!"; //else if user type wrong password he will get this...
}
else echo "Username doesn't exist!"; //if username doesn't exist in table user will get this
}
else echo "Type name and password!"; //else if user doesn't type all fields he will get this...
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Basic UCP</title>
nuj..
<form action='login.php' method='POST'>
<input type="text" name="username" value='<?php echo $username?>'/>
<input type="password" name="password"/>
<input type='submit' name="submit" value='Login' />
</form>
</head>
</html>