need help with my login system

[Jay77710]

My login system without mysql isn't validating my login info right. I'll register, then go to the login page. My problem is, when I login (I'm using the "test" username and "test" password I registered with. And I don't think I'm typing it in wrong) it says that my username and password do not match.

 

here is the login.php that the login script uses

<?php

if (isset ($_POST['submit'])) {

$loggedin = FALSE;

$fp = fopen ( 'users.txt', 'rb' );

while ( $line = fgetcsv ($fp, 100, "\t")) {

if ( ($line[0] == $_POST['username']) AND ($line[1] == crypt ($_POST['password'], $line[1]) ) ) {

$loggedin = TRUE;

break;

}

}

}

if ($loggedin) {

print ("You are now logged in!");

} else {

print ("The username and password did not match!");

}

?>

 

and this is the user.txt that it pulls the info from

test	$1$iIujXdC1$hnHez0KjeD7jch0Xz8yH/1	11988036902649

 

if you can help me figure this out, that would be great.

[MadTechie]

this doesn't look right to me

($line[1] == crypt ($_POST['password'], $line[1]) ) 

 

shouldn't it be

($line[1] == crypt ($_POST['password']) ) 

 

or

 

($line[1] == crypt ($_POST['password'], $line[0]) ) 

[Jay77710]

I'll try that

[Jay77710]

I'm still getting the same thing

[redarrow]

try this

<?php

if (isset ($_POST['submit'])) {

$username=$_POST['username'];

$password=$_POST['password'];

$loggedin = FALSE;

$fp = fopen ( 'users.txt', 'rb' );

while ( $line = fgetcsv ($fp, 100, "\t")) {

if ( ($line[0] == crypt ($password), $line[1]) ) ) {

$loggedin = TRUE;

break;

}

}

}

if ($loggedin) {

print ("You are now logged in!");

} else {

print ("The username and password did not match!");

}

?>

[Jay77710]

still not working  :-\

[redarrow]

try

<?php

if (isset ($_POST['submit'])) {

$username=$_POST['username'];

$password=$_POST['password'];

$loggedin = FALSE;

$fp = fopen ( 'users.txt', 'rb' );

while ( $line = fgetcsv ($fp, 100, "\t")) {

if ( ($line[1] == crypt ($password) ) {

$loggedin = TRUE;

break;

}

}

}

if ($loggedin) {

print ("You are now logged in!");

} else {

print ("The username and password did not match!");

}

?>

[Jay77710]

when I register, it creates an empty folder using that users id... should I put something in that folder?