New Login Script
Posted on
16th Feb 2014 07:03 pm by
admin
Hi all, i attempted to create a whole new login script witch isnt working for some reason i dont know why. When i put the users details and then press submit, it just refreshes the page, even when i put the wrong details in it still does the same..
<?php
session_start();
include_once"config.php";
if (strip_tags($_GET['logout']) == "yes"){
session_destroy();
}elseif (isset($_SESSION['username'])){
header("Location: index2.php");
exit();
}
if ($_POST['Submit'] && strip_tags($_POST['username']) && strip_tags($_POST['password'])){
$username = addslashes(strip_tags($_POST['username']));
$password = addslashes(strip_tags($_POST['password']));
$ip = $REMOTE_ADDR;
///check INFO
$sql = mysql_query("SELECT * FROM allmembers WHERE username='$username' AND password='$password' LIMIT 1");
$login_check = mysql_num_rows($sql);
$inf = mysql_fetch_object($sql);
if ($login_check == "0"){
$message="You could not be logged in";
}elseif ($login_check != "0"){
if ($login_check > "0"){
if ($inf->status == "Dead"){
include_once"dead.php";
exit();
}
if ($inf->status == "Banned"){
$encoded=md5(strtolower($username));
header("Location: banned.php?banned=$username&encoded=$encoded");
exit();
}
session_register('username');
$_SESSION['username'] = $inf->username;
$timestamp = time()+60;
mysql_query("UPDATE allmembers SET online='$timestamp' WHERE username='$username'");
mysql_query("UPDATE allmembers SET l_ip='$ip' WHERE username='$username'");
header("Location: members.php");
} else {
$message= "You could not be logged in.<br />";
}}}
$total_regged=mysql_num_rows(mysql_query("SELECT * FROM allmembers"));
$admins=mysql_num_rows(mysql_query("SELECT * FROM allmembers WHERE userlevel='2'"));
$mods=mysql_num_rows(mysql_query("SELECT * FROM allmembers WHERE userlevel='1'"));
$iti=mysql_fetch_object(mysql_query("SELECT * FROM site_stats WHERE id='1'"));
$most=$iti->online;
?>
Thats all the php code for my login system.
Thanks for your help.
No comments posted yet
Your Answer:
Login to answer
219
7
Other forums
RTF fomatting to email content
Im trying to sen an email with content is picked up from a rtf-file (file_get_contents('*.rtf'). Mai
Multi image upload
I have a gallery to build and want to build a dynamic upload form to allow for $var number of fields
Multiple Pages
Hi. Im very new to php. I'm trying to create a basic login/registration page.
So I have a bas
PHP Session Issue
I'm having an issue with one section on my website dealing with sessions. Now I know that myself and
check how many commas the variable containing the query has between [i]select[/i
Hi...
iv made an sql table that contains id number - name of sql query and an sql query.
T
New to Arrays
Hi I am new to PHP (a week and a half now) and I am just beginning to read about arrays. I understan
ALV grid with 2 headers
Hi Gurus,
I need to display ALV GRID as below.
Header1
is this the proper use of mysql_real_escape_string() to prevent sql injections?
i was wondering is this the proper use of mysql_real_escape_string() to prevent sql injections? any
exclude characters from counting?
Hello, I wanted to ask if you have a string like:
Code: $my_s='ASRGREGTGTR----REGREGRE+++RRRRRR..
help with insert
Hi there,
I am trying to insert some data into a database, but for some reason, it is not ins