Web Design Forum: Shaun Childerley - Viewing Profile - Web Design Forum

www.flashbuilding.com is not his site

um no thats how majoyity of sites do it these days thats why they have captchas creating random passwords is more of a headach unless its for password recovery due to the fact they have to copy and paste the generated pass to login then go and change there password, makes no since

<form>
<input type="password" value="<?php random(); ?>" />
</form>

http://www.bkwebdesi....co.uk/project/

please check out that link

sign up, and then go to log in,

when you log in, you get an error,

however,

if you go back to homeepage you are loggd in ok!

so must be something wrong with this

<?php
/* 
Created By Adam Khoury @ www.flashbuilding.com 
-----------------------June 20, 2008----------------------- 
*/
if ($_POST['email']) {
//Connect to the database through our include 
include_once "connect_to_mysql.php";
$email = stripslashes($_POST['email']);
$email = strip_tags($email);
$email = mysql_real_escape_string($email);
$password = ereg_replace("[^A-Za-z0-9]", "", $_POST['password']); // filter everything but numbers and letters
$password = md5($password);
// Make query and then register all database data that -
// cannot be changed by member into SESSION variables.
// Data that you want member to be able to change -
// should never be set into a SESSION variable.
$sql = mysql_query("SELECT * FROM members WHERE email='$email' AND password='$password' AND emailactivated='1'"); 
$login_check = mysql_num_rows($sql);
if($login_check > 0){ 
    while($row = mysql_fetch_array($sql)){ 
        // Get member ID into a session variable
        $id = $row["id"];   
        session_register('id'); 
        $_SESSION['id'] = $id;
        // Get member username into a session variable
	    $username = $row["username"];   
        session_register('username'); 
        $_SESSION['username'] = $username;
        // Update last_log_date field for this member now
        mysql_query("UPDATE members SET lastlogin=now() WHERE id='$id'"); 
        // Print success message here if all went well then exit the script
		header("location: index.php"); 
		exit();
    } // close while
} else {
// Print login failure message to the user and link them back to your login page
  print '<br /><br /><font color="#FF0000">No match in our records, try again </font><br />
<br /><a href="login.php">Click here</a> to go back to the login page.';
  exit();
}
}// close if post
?>

help please +1s

once this bit is done, i can code this into a template, then create an admin section for a client to check all the customers who have signed up and stuff.

gunna be a wicked project for me once finished woo

yes just create a password field on ur registration page,sha1 or md5 the password then insert into mysql

hey all

making progress with my site thanks for the help

come across another issue, at the moment my regisration form creates a random p.w and emails it to the user enabling them to log in,

my query is,

can i change this so that user can enter their own password? here is my registration details if it helps

regards

$pass = substr(md5($_SERVER['REMOTE_ADDR'].microtime().rand(1,100000)),0,6);

this generates a random password and emails it to the user after they enter a username and their email address

1. what would i need to add to my regisration form to allow a user generated p.w
2. do i need to change anything on the sql?
3. what would the field on the form be?

thanks again in advance everyone