Defibber Posted April 3, 2008 Share Posted April 3, 2008 Ok, I have a problem that directly relates to http://www.phpfreaks.com/forums/index.php/topic,175920.0.html but he had solved it himself but didn't post the solution. I think I might have come to the correct solution but it causes an error in Dreamweaver. When I make a change it creates a second Server Behavior that is Identical and it won't let you delete one. I think I want to do something like this: (I added the password() <?php ### Full script below in next code. $LoginRS__query=sprintf("SELECT username, password, level FROM users WHERE username=%s AND password=MD5(%s)" GetSQLValueString($loginUsername, "text"), GetSQLValueString($password, "text")); ?> Any Ideas? I tried E-Mailing the Person that had the post but it is an invalid E-Mail. <?php // *** Validate request to login to this site. if (!isset($_SESSION)) { session_start(); } $loginFormAction = $_SERVER['PHP_SELF']; if (isset($_GET['accesscheck'])) { $_SESSION['PrevUrl'] = $_GET['accesscheck']; } if (isset($_POST['username'])) { $loginUsername=$_POST['username']; $password=$_POST['password']; $MM_fldUserAuthorization = "level"; $MM_redirectLoginSuccess = "file:///W|/websites/MySite/index.php"; $MM_redirectLoginFailed = "file:///W|/websites/MySite/unauth.php"; $MM_redirecttoReferrer = false; mysql_select_db($database_MySite, $MySite); $LoginRS__query=sprintf("SELECT username, password, level FROM users WHERE username=%s AND password=%s" GetSQLValueString($loginUsername, "text"), GetSQLValueString($password, "text")); $LoginRS = mysql_query($LoginRS__query, $MySite) or die(mysql_error()); $loginFoundUser = mysql_num_rows($LoginRS); if ($loginFoundUser) { $loginStrGroup = mysql_result($LoginRS,0,'level'); //declare two session variables and assign them $_SESSION['MM_Username'] = $loginUsername; $_SESSION['MM_UserGroup'] = $loginStrGroup; if (isset($_SESSION['PrevUrl']) && false) { $MM_redirectLoginSuccess = $_SESSION['PrevUrl']; } header("Location: " . $MM_redirectLoginSuccess ); } else { header("Location: ". $MM_redirectLoginFailed ); } } ?> Quote Link to comment Share on other sites More sharing options...
Defibber Posted April 5, 2008 Author Share Posted April 5, 2008 Ok, I think I got it figured out. I used this code: .........if (isset($_POST['username'])) { $loginUsername=$_POST['username']; $password=md5($_POST['password']); $MM_fldUserAuthorization = "level"; $MM_redirectLoginSuccess = "index.php"; $MM_redirectLoginFailed = "unauth.php"; $MM_redirecttoReferrer = true; ............ I also found out the hard way that password() in MySql is different than md5() Thanks Anyways Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.