nuk3 — Wed, 21 May 2003 08:09:18 +0000

Ok then

Mark Hensler — Tue, 20 May 2003 11:22:43 +0000

Move the include(header.php) after the header() call.

nuk3 — Mon, 19 May 2003 06:33:38 +0000

What can I do about the header errors I'm getting with the Header Location uncommented?

Warning: Cannot modify header information - headers already sent by (output started at /home/silonet/public_html/includes/header.php:14) in /home/silonet/public_html/member/login.php on line 40
Your logged in

Mark Hensler — Sun, 18 May 2003 19:42:45 +0000

mysql_fetch_row() should be using $sql. or, change $sql to $result above.

nuk3 — Sun, 18 May 2003 02:01:20 +0000

The script didn't work. I found a couple of mistakes:
$prompt // Should've been <?=$prompt?>
And the the column is userid not id. // My error

I'm getting the following error:

Warning: mysql_fetch_row(): supplied argument is not a valid MySQL result resource in /home/silonet/public_html/member/login.php on line 38
Your logged in

--
Try a login with 'hey' and 'hey'.
http://www.silonetwork.com/member/login.php

Mark Hensler — Sat, 17 May 2003 17:08:54 +0000

<?php
session_start();

function footer()
{
    include(\"/home/silonet/public_html/includes/footer.php\");
}

include(\"/home/silonet/public_html/includes/header.php\");


if ($id == 'logoff') {
    session_unregister('username');
    session_unregister('password');
    session_destroy();
    die(\"you're logged out\");
}

if ($submit) {
    
    $db = mysql_connect(\"*************\");
    
    if (!$db)
        echo \"A conection to the database could not be established. Please try again later or contact the website administrator.\";
    
    mysql_select_db(\"******\");
    
    
    $sql = mysql_query(\"SELECT id FROM member WHERE username='$username' AND password='\".md5($password).\"'\");
    $numrows = mysql_num_rows($sql);
    
    if($numrows == 1) {
        $_SESSION['username'] = $username;
        
        // stick the user id in the session data as well
        list($_SESSION['uid']) = mysql_fetch_row($result);
        
        // this should most likely be a redirect:
        // header(\"Location: index.php\");
        die(\"your logged in\");
    }
    elseif($numrows > 1) {
        // you should have `username` and `password` both under the same
        // UNIQUE key in mysql so that this never happens
        $prompt = 'More than one account was found with the same login information.';
        $prompt .= '  This system cannot proceed.  Please contact the administrator.';
        die($prompt);
    }
    else {
        $prompt = 'Incorrect login information, please try again. You must login to access this document.';
    }
    
}
else {
    $prompt = 'Members only. Please login to access this document.';
}


<form action=\"=$PHP_SELFif($QUERY_STRING){ echo\"?\". $QUERY_STRING;}\" method=\"POST\">
<p align=\"center\">$prompt</p>
<table align=\"center\" border=\"0\">
 <tr>
  <th>
Username:
  </th>
  <th>
<input type=\"text\" name=\"username\">
  </th>
 </tr>
 <tr>
  <th>
Password:
  </th>
  <th>
<input type=\"password\" name=\"password\">
  </th>
 </tr>
 <tr>
  <th colspan=\"2\" align=\"right\">
<input type=\"submit\" name=\"submit\" value=\"Login\">
</form>
  </th>
 </tr>
</table>
</body>
</html>


<a href=\"http://www.silonetwork.com/member/login.php?id=logoff\">Log Off</a>


include(\"/home/silonet/public_html/includes/footer.php\");
?>