I need some help. I get this error message- Connected to Database Wrong Username

[vetman]

I get this error message- Connected to Database Wrong Username or Password from this script. Can anyone help?

Thanks

 

<?php

$host="localhost"; // Host name

$username=""; // Mysql username

$password=""; // Mysql password

$db_name="test"; // Database name

$tbl_name="members"; // Table name

 

// Connect to server and select databse.

mysql_connect("$host", "$username", "$password")or die("cannot connect");

mysql_select_db("$db_name")or die("cannot select DB");

 

// username and password sent from form

$myusername=$_POST['myusername'];

$mypassword=$_POST['mypassword'];

 

// To protect MySQL injection

$myusername = stripslashes($myusername);

$mypassword = stripslashes($mypassword);

$myusername = mysql_real_escape_string($myusername);

$mypassword = mysql_real_escape_string($mypassword);

 

$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";

$result=mysql_query($sql);

 

// Mysql_num_row is counting table row

$count=mysql_num_rows($result);

// If result matched $myusername and $mypassword, table row must be 1 row

 

if($count==1){

// Register $myusername, $mypassword and redirect to file "login_success.php"

session_register("myusername");

session_register("mypassword");

header("location:login_success.php");

}

else {

echo "Wrong Username or Password";

}

?>

[dptr1988]

You shouldn't be using session_register, it depends on register globals which is bad.

 

Use session_start() at the begining of your page and the $_SESSION global variable instead.

 

Example:

<?php
$_SESSION['myusername'] =$myusername;
?>

 

Have you checked the username and password right before they go into the SQL query to check if they are still correct?

 

IF you still cant figure it out, please echo your SQL query and post it here.

[vetman]

Thanks for the reply, I'm totally lost now. I guess this is out of my ability.

[teng84]

try and see whats gonna happen

<?php
session_start();
$host="localhost"; // Host name
$username=""; // Mysql username
$password=""; // Mysql password
$db_name="test"; // Database name
$tbl_name="members"; // Table name

// Connect to server and select databse.
mysql_connect($host, $username, $password)or die("cannot connect");
mysql_select_db($db_name)or die("cannot select DB");

// username and password sent from form
$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];

// To protect MySQL injection
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql) or die(mysql_error());

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
$_SESSION['myusername'] =$myusername;
$_SESSION['mypassword'] =$mypassword;
header("location:login_success.php");
}
else {
echo "Wrong Username or Password";
}
?>

[vetman]

This is the error I get now:  Unknown column 'username' in 'where clause'

[teng84]

check your table and see if you have that field... im suspecting you don't have that table or there's a typo error 

[vetman]

Yea, My table was members , not where.

New error message:

 

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'username='john' and password='1234'' at line 1

[teng84]

please post your code now and try to echo the query and paste here

[vetman]

I get this message now: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'username='' and password=''' at line 1

 

 

<?php

session_start();

$host=""; // Host name

$username=""; // Mysql username

$password=""; // Mysql password

$db_name=""; // Database name

$tbl_name="members"; // Table name

 

// Connect to server and select databse.

mysql_connect($host, $username, $password)or die("cannot connect");

mysql_select_db($db_name)or die("cannot select DB");

 

// username and password sent from form

$myusername=$_POST['myusername'];

$mypassword=$_POST['mypassword'];

 

// To protect MySQL injection

$myusername = stripslashes($myusername);

$mypassword = stripslashes($mypassword);

$myusername = mysql_real_escape_string($myusername);

$mypassword = mysql_real_escape_string($mypassword);

 

$sql="SELECT * FROM $tbl_name MEMBERS username='$myusername' and password='$mypassword'";

$result=mysql_query($sql) or die(mysql_error());

 

// Mysql_num_row is counting table row

$count=mysql_num_rows($result);

// If result matched $myusername and $mypassword, table row must be 1 row

 

if($count==1){

// Register $myusername, $mypassword and redirect to file "login_success.php"

$_SESSION['myusername'] =$myusername;

$_SESSION['mypassword'] =$mypassword;

header("location:login_success.php");

}

else {

echo "Wrong Username or Password";

}

?>