borellus
Members
-
Joined
-
Last visited
Reputation Activity
-
borellus reacted to Shaun Childerley in Feels better.Just donated £5 to webdesignerforum and i actualy feel good about it.
-
borellus reacted to Shaun Childerley in Simple login script problemThis script is vunerable to MYSQL Injection.
-
borellus reacted to SniderDK in htaccess confusion? lil helpyou could use a catch all and filter what you want in code, makes the rule run faster too
RewriteRule ^(.*)/?$ users.php?username=$1
-
borellus reacted to SniderDK in Simple login script problemthat is rather odd... if this doesn't work you have to have incorrect data in the DB or coming in the post vars... i would of thought.
try using echo var_dump(); as it dumps the data type
<?php session_start(); require('config.php'); $username = $_POST['user']; $password = $_POST['password']; $username = stripslashes($username); $password = md5($password); $userdata = mysql_fetch_assoc(mysql_query("SELECT * FROM users WHERE username = '$username' AND password = '$password' LIMIT 1")); if($userdata['username'] == $username){ $_SESSION['loggedin'] = "true"; $_SESSION['user'] = $userdata['username']; header("Location: index.php"); exit; } else { $_SESSION['loggedin'] = "false"; header("Location: error.php?code=2"); exit; } ?>
