PHP LOGIN FORM NOT WORKING PROPERLYL. HELP PLZEZ.

[newb]

[code]
<?php
if(session_id() == "")
{
session_start();
}
$ses_id = session_id();


// ######################### Include Source Files #########################
require "sources/core/global.php";

  $user = $_SESSION['username'];
  $username = $_POST['username'];
  $password = $_POST['password'];

if ($action == "") { // if form hasn't been submitted


// Load Header
include $tpath."header.php";

    $query = $libmysql->query("SELECT active FROM $table_blocks WHERE id=0");
    $row = $libmysql->fetch_array($query);
   
    // Check if block is active
    $block_active = $row['active'];
if ($block_active == 1)
{
{
    $query = $libmysql->query("SELECT data FROM $table_blocks WHERE id=0");
    $row = $libmysql->fetch_row($query);
    $midlink = $row[0];   
echo $midlink;
$libmysql->free_result($query);
}
} else if($block_active == 0) {
  print "<!--Inactive Block (ID=0 - MIDLINK)!-->";
}

// Load Body Template
include $tpath."structure.php";
echo "Current Session Key: $ses_id<br /><br />";
echo "<form action='modules.php?name=member&action=login' method='post'>
<table align='left' border='0' cellspacing='0' cellpadding='3'>
<tr><td>Username:</td><td><input type='text' name='user' maxlength='30'></td></tr>
<tr><td>Password:</td><td><input type='password' name='pass' maxlength='30'></td></tr>
<tr><td colspan='2' align='left'><input type='checkbox' name='remember'>
<font size='2'>Remember me next time</td></tr>
<tr><td colspan='2' align='right'><input type='submit' name='sublogin' value='Login'></td></tr>
<tr><td colspan='2' align='left'><a href='modules.php?name=signup'>Join</a></td></tr>
</table>
</form>";

// ######################### End of Registration Code #########################
// Load Body Template
include $tpath."structure2.php";

// Begin Loading Footerlink Block
    $query = $libmysql->query("SELECT active FROM $table_blocks WHERE id=1");
    $row = $libmysql->fetch_array($query);
   
    // Check if block is active
    $block_active = $row['active'];
if ($block_active == 1)
{
{
    $query = $libmysql->query("SELECT data FROM $table_blocks WHERE id=1");
    $row = $libmysql->fetch_row($query);
    $footerlink = $row[0];   
echo $footerlink;
$libmysql->free_result($query);
}
} else if($block_active == 0) {
  print "<!--Inactive Block (ID=1 - FOOTERLINK)!-->";
}


// Begin Loading Copyright Block
    $query = $libmysql->query("SELECT active FROM $table_blocks WHERE id=2");
    $row = $libmysql->fetch_array($query);
   
    // Check if block is active
    $block_active = $row['active'];
if ($block_active == 1)
{
{
    $query = $libmysql->query("SELECT data FROM $table_blocks WHERE id=2");
    $row = $libmysql->fetch_row($query);
    $copyright = $row[0];   
echo $copyright;
$libmysql->free_result($query);
}
} else if($block_active == 0) {
  print "<!--Inactive Block (ID=2 - COPYRIGHT)!-->";
}

// Load Footer Template
include $tpath."footer.php";
}

// ######################### End Main Page Code #########################
else if ($action == "login") {

/**
* Checks whether or not the given username is in the
* database, if so it checks if the given password is
* the same password in the database for that user.
* If the user doesn't exist or if the passwords don't
* match up, it returns an error code (1 or 2).
* On success it returns 0.
*/
function confirmUser($username, $password){
  global $connection;
  /* Add slashes if necessary (for query) */
  if(!get_magic_quotes_gpc()) {
$username = addslashes($username);
  }

  /* Verify that user is in database */
  $q = "select password from $table_users where username = '$username'";
  $result = mysql_query($q,$connection);
  if(!$result || (mysql_numrows($result) < 1)){
      return 1; //Indicates username failure
  }

  /* Retrieve password from result, strip slashes */
  $dbarray = mysql_fetch_array($result);
  $dbarray['password']  = stripslashes($dbarray['password']);
  $password = stripslashes($password);

  /* Validate that password is correct */
  if($password == $dbarray['password']){
      return 0; //Success! Username and password confirmed
  }
  else{
      return 2; //Indicates password failure
  }
}

/**
* checkLogin - Checks if the user has already previously
* logged in, and a session with the user has already been
* established. Also checks to see if user has been remembered.
* If so, the database is queried to make sure of the user's
* authenticity. Returns true if the user has logged in.
*/
function checkLogin(){
  /* Check if user has been remembered */
  if(isset($_COOKIE['cookname']) && isset($_COOKIE['cookpass'])){
      $_SESSION['username'] = $_COOKIE['cookname'];
      $_SESSION['password'] = $_COOKIE['cookpass'];
  }

  /* Username and password have been set */
  if(isset($_SESSION['username']) && isset($_SESSION['password'])){
      /* Confirm that username and password are valid */
      if(confirmUser($_SESSION['username'], $_SESSION['password']) != 0){
        /* Variables are incorrect, user not logged in */
        unset($_SESSION['username']);
        unset($_SESSION['password']);
        return false;
      }
      return true;
  }
  /* User not logged in */
  else{
      return false;
  }
}

/**
* Determines whether or not to display the login
* form or to show the user that he is logged in
* based on if the session variables are set.
*/
function displayLogin(){
  global $logged_in;
  if($logged_in){
      echo "<h1>Logged In!</h1>";
      echo "Welcome <b>$_SESSION[username]</b>, you are logged in. <a href=\"modules.php?name=member&action=logout\">Logout</a>";
  } else {

}


/**
* Checks to see if the user has submitted his
* username and password through the login form,
* if so, checks authenticity in database and
* creates session.
*/
if(isset($_POST['sublogin'])){
  /* Check that all fields were typed in */
  if(!$_POST['user'] || !$_POST['pass']){
      die('You didn\'t fill in a required field.');
  }
  /* Spruce up username, check length */
  $_POST['user'] = trim($_POST['user']);
  if(strlen($_POST['user']) > 30){
      die("Sorry, the username is longer than 30 characters, please shorten it.");
  }

  /* Checks that username is in database and password is correct */
  $md5pass = md5($_POST['pass']);
  $result = confirmUser($_POST['user'], $md5pass);

  /* Check error codes */
  if($result == 1){
      die('That username doesn\'t exist in our database.');
  }
  else if($result == 2){
      die('Incorrect password, please try again.');
  }

  /* Username and password correct, register session variables */
  $_POST['user'] = stripslashes($_POST['user']);
  $_SESSION['username'] = $_POST['user'];
  $_SESSION['password'] = $md5pass;

  /**
    * This is the cool part: the user has requested that we remember that
    * he's logged in, so we set two cookies. One to hold his username,
    * and one to hold his md5 encrypted password. We set them both to
    * expire in 100 days. Now, next time he comes to our site, we will
    * log him in automatically.
    */
  if(isset($_POST['remember'])){
      setcookie("cookname", $_SESSION['username'], time()+60*60*24*100, "/");
      setcookie("cookpass", $_SESSION['password'], time()+60*60*24*100, "/");
  }

  /* Quick self-redirect to avoid resending data on refresh */
  echo "<meta http-equiv=\"Refresh\" content=\"0;url=$HTTP_SERVER_VARS[PHP_SELF]\">";
  return;


/* Sets the value of the logged_in variable, which can be used in your code */
$logged_in = checkLogin(); }

else if ($action == "logout") { // if logout
session_start();


/**
* Delete cookies - the time must be in the past,
* so just negate what you added when creating the
* cookie.
*/
if(isset($_COOKIE['cookname']) && isset($_COOKIE['cookpass'])){
  setcookie("cookname", "", time()-60*60*24*100, "/");
  setcookie("cookpass", "", time()-60*60*24*100, "/");
}

if(!$logged_in){
  echo "<h1>Error!</h1>\n";
  echo "You are not currently logged in, logout failed. Back to <a href=\"main.php\">main</a>";
} else{
  /* Kill session variables */
  unset($_SESSION['username']);
  unset($_SESSION['password']);
  $_SESSION = array(); // reset session array
  session_destroy();  // destroy session.

  echo "<h1>Logged Out</h1>\n";
  echo "You have successfully <b>logged out</b>. Back to <a href=\"main.php\">main</a>";
}
}
}
}
}
?>[/code]

k i dont know much but when i submit the form it just goes to a blank page k please help i dont know what to do.

[logged_with_bugmenot]

What's the name of that file?

P.S. that's a long file that includes other files so it's likely no one will be able to help. You need to trim out anything extra and make sure we have the complete code that's being executed.

[corbin]

You have an extra } at the end... Dont know if thats whats causin your problem though...

Like logged_with_bugmenot said, i cant tell since its so long and has so many random includes...