[SOLVED] n00b login problem

[chocopi]

When the user tries to login it does not recognise their password. so if they type in their password it does not login but if they leave the password field blank, it does.

 

<?php

require_once ('page_header.php');

session_start();
$username = $_POST['username'];
$password = md5($_POST['password']);

$query = "SELECT * FROM users WHERE username='$username' and password='$password'";

$result = mysql_query($query);

if (mysql_num_rows($result) != 1) {
$error = 'Bad Login';

//html code

	if($_POST){
		print ("<font color=\"#ff0000\"> \n");
		print ("<center> \n");
		echo ("Incorrect Username and Password combination.");
		print ("</center> \n");
		print ("</font> \n");
		require_once ('page_footer.php');
	}

} else {
    $_SESSION['username'] = '$username';
    require_once ('memberspage.php');
}

?>

 

Thanks in advance,

 

~ Chocopi

[guyfromfl]

is the password md5 in the db?

[chocopi]

yes it is

[chocopi]

ok i found the problem but it looks fine to me

 

if ($raw_password !== $raw_confirm){
echo ("Your passwords must be identical.");
require_once ('page_footer.php');
die ("");
} else {
$password = md5($_POST['raw_password']);
}

 

The idea of this is that it validates the raw_password and raw_confirm and if it is true then it sets the md5 of raw_password to $password. But it hasnt worked :'(

[chigley]

Change !== to !=

[chocopi]

cheers,

 

is there anything wrong the variable thingy

 

$password = md5($_POST['raw_password']);

 

as the password is being added as 'd41d8cd98f00b204e9800998ecf8427e' which is blank

 

thanks,

 

Chocopi

[chocopi]

oh no dont worry i sorted it by changing

 

This:

$password = md5($_POST['raw_password']);

 

To:

$raw_password = md5($raw_password);
$password = $raw_password;

 

And it seems to work