[SOLVED] login already defined

[contra10]

I'm trying to create a login that is already defined in the script...my password and username are already specific...i tries to login and redirect but its not working

 

<?php
  <?php 

//if the login form is submitted
if (isset($_POST['submit'])) { // if form has been submitted

if (($_POST['username'] == "login") and ($_POST['pass'] == "login")){


   // Create the URL string
   $url = "http://localhost/indicatedaccess.php/"; 
   
   // Finall Echo the meta tag
   echo('<meta HTTP-EQUIV="REFRESH" content="0; url='.$url.'">');
}
}
?>
INCORRECT TRY AGAIN!

        <form action="<?php echo $_SERVER['PHP_SELF']?>" method="post"> 
Username:
            <input type="text" name="username" /><br>
Password:
         <input type="password" name="pass"/><br>
		 <input type="submit">
</form>
?>

[JonnoTheDev]

Use the header function to redirect, not a meta refresh.

 

header("Location: xyz.php");
exit();

[contra10]

i tried that b4 too and i'm tried it again but i still don't get redirected

 

  <?php 

//if the login form is submitted
if (isset($_POST['submit'])) { 

if (($_POST['username'] == "login") and ($_POST['pass'] == "login")){

header("Location: http://localhost/admin/indicatedaccess.php");
exit();
}
}
?>

[allworknoplay]

Try this:

 

 

  <?php 

//if the login form is submitted
if (isset($_POST['submit'])) { 

if (($_POST['username'] == "login") && ($_POST['pass'] == "login")){

header("Location: http://localhost/admin/indicatedaccess.php");
exit();
}
}
?>

[JonnoTheDev]

if($_POST['username'] == "login" && $_POST['pass'] == "login") {

[contra10]

i tried both

 

if (($_POST['username'] == "login") && ($_POST['pass'] == "login")){

 

and

if ($_POST['username'] == "login" && $_POST['pass'] == "login"){

 

neither are working...it just reloads the same page

[JonnoTheDev]

get rid of this:

if (isset($_POST['submit'])) {

 

and use a hidden field:

<input type="hidden" name="action" value="login" />

 

if($_POST['action'] && $_POST['action'] == 'login') {
   // validate username and password
}

[premiso]

Neil hit the nail on the head.

 

However you do not "need" the hidden input.

 

          <input type="submit" name="submit" value="Submit" />
</form>

 

That would allow your original code to work. You just were not defining a name for that submit button so it was never populating the $_POST['submit'] data..

[contra10]

wow i feel so dumb for missing that...thxs