PHP login script

[Galt]

heihei

jeg har fått en oppgave på skolen nå der jeg skal lage en hjemmeside å jeg er ganske fesk på dette, har sitti å lest endel å prøvd å greie dette selv men, ble sittende fast når jeg skulle lage login biten.

jeg har fått satt opp databasen, å fått registreing av nye brukere fungerer(tror jeg).

men, står fast på login.

 

dere kan gjerne ta en titt på siden.

www.iktklassen.net

 

å her skulle det ha hvert en login side.

www.iktklassen.net/login.php

 

<?

/**
* Checks whether or not the given username is in the
* database, if so it checks if the given password is
* the same password in the database for that user.
* If the user doesn't exist or if the passwords don't
* match up, it returns an error code (1 or 2). 
* On success it returns 0.
*/
function confirmUser($username, $password){
  global $conn;
  /* Add slashes if necessary (for query) */
  if(!get_magic_quotes_gpc()) {
$username = addslashes($username);
  }

  /* Verify that user is in database */
  $q = "select password from users where username = '$username'";
  $result = mysql_query($q,$conn);
  if(!$result || (mysql_numrows($result) < 1)){
  return 1; //Indicates username failure
  }

  /* Retrieve password from result, strip slashes */
  $dbarray = mysql_fetch_array($result);
  $dbarray['password']  = stripslashes($dbarray['password']);
  $password = stripslashes($password);

  /* Validate that password is correct */
  if($password == $dbarray['password']){
  return 0; //Success! Username and password confirmed
  }
  else{
  return 2; //Indicates password failure
  }
}

/**
* checkLogin - Checks if the user has already previously
* logged in, and a session with the user has already been
* established. Also checks to see if user has been remembered.
* If so, the database is queried to make sure of the user's 
* authenticity. Returns true if the user has logged in.
*/
function checkLogin(){
  /* Check if user has been remembered */
  if(isset($_COOKIE['cookname']) && isset($_COOKIE['cookpass'])){
  $_SESSION['username'] = $_COOKIE['cookname'];
  $_SESSION['password'] = $_COOKIE['cookpass'];
  }

  /* Username and password have been set */
  if(isset($_SESSION['username']) && isset($_SESSION['password'])){
  /* Confirm that username and password are valid */
  if(confirmUser($_SESSION['username'], $_SESSION['password']) != 0){
	 /* Variables are incorrect, user not logged in */
	 unset($_SESSION['username']);
	 unset($_SESSION['password']);
	 return false;
  }
  return true;
  }
  /* User not logged in */
  else{
  return false;
  }
}

/**
* Determines whether or not to display the login
* form or to show the user that he is logged in
* based on if the session variables are set.
*/
function displayLogin(){
  global $logged_in;
  if($logged_in){
  echo "<h1>Logged In!</h1>";
  echo "Welcome <b>$_SESSION[username]</b>, you are logged in. <a href=\"logout.php\">Logout</a>";
  }
  else{
?>

<h1>Login</h1>
<form action="" method="post">
<table align="left" border="0" cellspacing="0" cellpadding="3">
<tr><td>Username:</td><td><input type="text" name="user" maxlength="30"></td></tr>
<tr><td>Password:</td><td><input type="password" name="pass" maxlength="30"></td></tr>
<tr><td colspan="2" align="left"><input type="checkbox" name="remember">
<font size="2">Remember me next time</td></tr>
<tr><td colspan="2" align="right"><input type="submit" name="sublogin" value="Login"></td></tr>
<tr><td colspan="2" align="left"><a href="register.php">Join</a></td></tr>
</table>
</form>

<?
  }
}


/**
* Checks to see if the user has submitted his
* username and password through the login form,
* if so, checks authenticity in database and
* creates session.
*/
if(isset($_POST['sublogin'])){
  /* Check that all fields were typed in */
  if(!$_POST['user'] || !$_POST['pass']){
  die('You didn\'t fill in a required field.');
  }
  /* Spruce up username, check length */
  $_POST['user'] = trim($_POST['user']);
  if(strlen($_POST['user']) > 30){
  die("Sorry, the username is longer than 30 characters, please shorten it.");
  }

  /* Checks that username is in database and password is correct */
  $md5pass = md5($_POST['pass']);
  $result = confirmUser($_POST['user'], $md5pass);

  /* Check error codes */
  if($result == 1){
  die('That username doesn\'t exist in our database.');
  }
  else if($result == 2){
  die('Incorrect password, please try again.');
  }

  /* Username and password correct, register session variables */
  $_POST['user'] = stripslashes($_POST['user']);
  $_SESSION['username'] = $_POST['user'];
  $_SESSION['password'] = $md5pass;

  /**
* This is the cool part: the user has requested that we remember that
* he's logged in, so we set two cookies. One to hold his username,
* and one to hold his md5 encrypted password. We set them both to
* expire in 100 days. Now, next time he comes to our site, we will
* log him in automatically.
*/
  if(isset($_POST['remember'])){
  setcookie("cookname", $_SESSION['username'], time()+60*60*24*100, "/");
  setcookie("cookpass", $_SESSION['password'], time()+60*60*24*100, "/");
  }

  /* Quick self-redirect to avoid resending data on refresh */
  echo "<meta http-equiv=\"Refresh\" content=\"0;url=$HTTP_SERVER_VARS[PHP_SELF]\">";
  return;
}

/* Sets the value of the logged_in variable, which can be used in your code */
$logged_in = checkLogin();

?>

 

har flere problemer å, når jeg finner coder på nette er det mange feil i dem, så må liksom jeg sitte å rette opp i de, å det er veldig stressene etter som jeg kan veldig lite:P hvorfor det?

 

å jeg skulle gjerne hatt et slags "members area" oppleg.

 

takk får alle svar

[BigJackW]

Test denne koden:

 

<?php

/**
* Checks whether or not the given username is in the
* database, if so it checks if the given password is
* the same password in the database for that user.
* If the user doesn't exist or if the passwords don't
* match up, it returns an error code (1 or 2).
* On success it returns 0.
*/
function confirmUser($username, $password){
  global $conn;
  /* Add slashes if necessary (for query) */
  if(!get_magic_quotes_gpc()) {
   $username = addslashes($username);
  }

  /* Verify that user is in database */
  $q = "select password from users where username = '$username'";
  $result = mysql_query($q,$conn);
  if(!$result || mysql_num_rows($result) < 1){
     return 0; //Indicates username failure
  }

  /* Retrieve password from result, strip slashes */
  $dbarray = mysql_fetch_array($result);
  $dbarray['password']  = stripslashes($dbarray['password']);
  $password = stripslashes($password);

  /* Validate that password is correct */
  if($password == $dbarray['password']){
     return 0; //Success! Username and password confirmed
  }
  else{
     return 2; //Indicates password failure
  }
}

/**
* checkLogin - Checks if the user has already previously
* logged in, and a session with the user has already been
* established. Also checks to see if user has been remembered.
* If so, the database is queried to make sure of the user's
* authenticity. Returns true if the user has logged in.
*/
function checkLogin(){
  /* Check if user has been remembered */
  if(isset($_COOKIE['cookname']) && isset($_COOKIE['cookpass'])){
     $_SESSION['username'] = $_COOKIE['cookname'];
     $_SESSION['password'] = $_COOKIE['cookpass'];
  }

  /* Username and password have been set */
  if(isset($_SESSION['username']) && isset($_SESSION['password'])){
     /* Confirm that username and password are valid */
     if(confirmUser($_SESSION['username'], $_SESSION['password']) != 0){
        /* Variables are incorrect, user not logged in */
        unset($_SESSION['username']);
        unset($_SESSION['password']);
        return false;
     }
     return true;
  }
  /* User not logged in */
  else{
     return false;
  }
}

/**
* Determines whether or not to display the login
* form or to show the user that he is logged in
* based on if the session variables are set.
*/
function displayLogin(){
  global $logged_in;
  if($logged_in){
     echo "<h1>Logged In!</h1>";
     echo "Welcome <b>$_SESSION[username]</b>, you are logged in. <a href=\"logout.php\">Logout</a>";
  }
  else{
?>

<h1>Login</h1>
<form action="" method="post">
<table align="left" border="0" cellspacing="0" cellpadding="3">
<tr><td>Username:</td><td><input type="text" name="user" maxlength="30"></td></tr>
<tr><td>Password:</td><td><input type="password" name="pass" maxlength="30"></td></tr>
<tr><td colspan="2" align="left"><input type="checkbox" name="remember">
<font size="2">Remember me next time</td></tr>
<tr><td colspan="2" align="right"><input type="submit" name="sublogin" value="Login"></td></tr>
<tr><td colspan="2" align="left"><a href="register.php">Join</a></td></tr>
</table>
</form>

<?php
  }
}


/**
* Checks to see if the user has submitted his
* username and password through the login form,
* if so, checks authenticity in database and
* creates session.
*/
if(isset($_POST['sublogin'])){
  /* Check that all fields were typed in */
  if(!$_POST['user'] || !$_POST['pass']){
     die('You didn\'t fill in a required field.');
  }
  /* Spruce up username, check length */
  $_POST['user'] = trim($_POST['user']);
  if(strlen($_POST['user']) > 30){
     die("Sorry, the username is longer than 30 characters, please shorten it.");
  }

  /* Checks that username is in database and password is correct */
  $md5pass = md5($_POST['pass']);
  $result = confirmUser($_POST['user'], $md5pass);

  /* Check error codes */
  if($result == 1){
     die('That username doesn\'t exist in our database.');
  }
  else if($result == 2){
     die('Incorrect password, please try again.');
  }

  /* Username and password correct, register session variables */
  $_POST['user'] = stripslashes($_POST['user']);
  $_SESSION['username'] = $_POST['user'];
  $_SESSION['password'] = $md5pass;

  /**
   * This is the cool part: the user has requested that we remember that
   * he's logged in, so we set two cookies. One to hold his username,
   * and one to hold his md5 encrypted password. We set them both to
   * expire in 100 days. Now, next time he comes to our site, we will
   * log him in automatically.
   */
  if(isset($_POST['remember'])){
     setcookie("cookname", $_SESSION['username'], time()+60*60*24*100, "/");
     setcookie("cookpass", $_SESSION['password'], time()+60*60*24*100, "/");
  }

  /* Quick self-redirect to avoid resending data on refresh */
  echo "<meta http-equiv=\"Refresh\" content=\"0;url=$HTTP_SERVER_VARS[php_SELF]\">";
  return;
}

/* Sets the value of the logged_in variable, which can be used in your code */
$logged_in = checkLogin();

?>

[Galt]

har fiksa login som funker nå.

men, den er liksom på egen side eks. www.dno.com/login.php

hvordan får jeg sånn at du kan logge inn på www.dno.com

at jeg får en liten login ting på siden der som funker?

[BigJackW]

På det stede du vil ha login-formen:

 

<?php include "login.php"; ?>

[Galt]

På det stede du vil ha login-formen:

 

<?php include "login.php"; ?>

 

tusen takk.. nå gikk det opp et lys her å.^^,