Help with Password Encoding/Decoding?


Posted on 16th Feb 2014 07:03 pm by admin

Trying to design a "change password" tool. On my signup code I'm using base64_encode, now I am trying to decode it on the change password screen and having issues. Yes I am very new to this.

I keep returning a fail response with this. Help?

<?php

include("check_session.php");
include("online.php");
include("site.conf.php");
include("$base_dir/include/scTemplate.class.php");
include("$base_dir/include/timestamp.inc.php");
include("$base_dir/include/index.inc.php");
include("$base_dir/include/calendar.inc.php");
include("$base_dir/include/images.inc.php");


/****************************************************************
* open connection to mysql server *
****************************************************************/

$conn = mysql_connect($db_host, $db_user, $db_password);
mysql_select_db($db_name, $conn);



$sql = "select id from tbl_pm_message ";
$sql .= "where (id_to='$user_id') and (status='online') and

(flag='1')";

$result = mysql_query($sql);
$new_message = mysql_num_rows($result);




if (($old_password == "") || ($password1 == "") || ($password2 == "") ||

($password1 != $password2)) {
$error = "upt01";
}

else {

$old_password = base64_decode($old_password);
$password1 = base64_encode($password1);
$password2 = base64_encode($password2);



$sql = "select id from tbl_user where (id='$user_id') and

(code='$user_code') and ";
$sql .= "('$old_password') ";

$result = mysql_query($sql);
$rows = mysql_num_rows($result);

if ($rows > 0) {





$sql = "update tbl_user set ('$password1'),

status='active' ";
$sql .= "where (id='$user_id') and (code='$user_code')

";

$result = mysql_query($sql);

if ($result) {
$error = "";
}
else {
$error = "upt02";
}
}
else {
$error = "upt03";
}
}

/****************************************************************
* generate page *
****************************************************************/

$tpl = new scTemplate("$templates_dir/password_result.html");
$tpl->replace("SC_SI_BANNER", show_banner());
$tpl->replace("SC_SI_ADS", show_ads());
$tpl->replace("SC_SI_MENU", show_menu(1));
$tpl->replace("SC_SI_LOGO", show_logo());
$tpl->replace("SC_SI_RIGHTLOGO", show_rightlogo());
$tpl->replace("SC_SI_SEARCH", show_search());
$tpl->replace("SC_SI_NEWS", show_news());
$tpl->replace("SC_SI_MEMBER", show_member());
$tpl->replace("SC_SI_CALENDAR", show_calendar());
$tpl->replace("SC_SI_BOTTOM", show_bottom());
$tpl->replace("SC_SI_COPYRIGHT", show_copyright());

$tpl->replace("SC_USERNAME", $user_name);
$tpl->replace("SC_NEW", $new_message);


if ($error == "") {
$tpl->replace("SC_RESULT", "OK");
}
else {
$tpl->replace("SC_RESULT", "Failed");
}

$tpl->write();

?>

No comments posted yet

Your Answer:

Login to answer
328 Like 25 Dislike
Previous forums Next forums
Other forums

Sending an SMS Message with ASP.NET
Often times it may be a requirement for your web application to send an SMS message. Such examples w

Edit MySQL Row Using PHP and HTML Form
Hello,

Here's what I'm trying to do. Build a page where a user enters a MySQL row number in.

SQL query not working well
Hi,
I made a small table with 5 rows and want to make them an sql consult using rownum

Onclick problem in Firefox
Hi,
I am using a . It doesn't seem to

Namespace Problem
I'm having problem with a section of code with a variable namespace.

This code works fine:

Regarding accessing SQL query issued by any user in Oracle 10g
Hi all,
i want to know the queries issued by various users accessing a database...

Firefox displaying PHP source code??
Currently testing a site thats almost built, am going to be including php on a sidebar on all pages

Function to extract email attachments using PHP IMAP
function extract_attachments($connection, $message_number) {

$attachments = array();

$_POST variable un-useable
I'm trying to use a $_POST variable in a mysql update statement but i can't use it for some unknown

Query issues
I probably have this setup wrong well I know I do because nothing is showing up now. What I want is

Sign up to write
Sign up now if you have flare of writing..
Login   |   Register
Follow Us
Indyaspeak @ Facebook Indyaspeak @ Twitter Indyaspeak @ Pinterest RSS



Play Free Quiz and Win Cash