Logging in

[westminster86]

Why is that the line, if ($result['password']==$password) is returning false? It finds the email address, but theres no match between the passwords.

 

<?php
  session_start();

  $email = $_POST['email'];
  $password = $_POST['password'];

  if (!$email || !$password)
  {
    echo '<p>You have not entered search details. <a href="login.php">Please go back and try again.</a></p>';
    exit;
  }

  $dbhandle = sqlite_popen("", 0666, $err_msg);
  if(!$dbhandle) die("Could not open the database");

  $query = sqlite_query($dbhandle, "SELECT * FROM users WHERE emailaddress='$email'");
  $result = sqlite_fetch_all($query, SQLITE_ASSOC);

  if (sqlite_num_rows($query)==0)
  {
    // invalid email address
  }
  else
  {

  if ($result['password']==$password)
  {
    // create session variable
  {

  }

  }
  else
  {
    // invalid password
  }

  }
?>

[uniflare]

a very quick and dirty debug with if statements would probably present a slotio, echo the two variables before comparing to make sure it is what you expected, also: priint_r($result); try that between the query and the problem if statement,

 

tell us what it says

[craygo]

I assume the password is being stored unencrypted. but you may want to do a little cleanup on the posted password to make sure no spaces are in it or unwanted characters. Echo out the form password and the database password and see what you get.

 

Ray

[westminster86]

Array ( [0] => Array ( [emailaddress] => [email protected] [password] => 123456 ) )

 

I dont get anything when echoing the line $result['password'];

 

 

 

 

 

 

[westminster86]

The funny thing is, if i were to use a foreach loop,

 

foreach($result as $row) {

  echo $row['password'];

}

 

it prints 123456. so why does it not work below?

 

if ($result['password']==$password)

[craygo]

Try using sqlite_fetch_array

 

$result = sqlite_fetch_array($query, SQLITE_ASSOC);

 

Ray