I'm looking for an example of a login system that has multiple fields
(2 to be exact) + password. e.g username, company name and password,
the user, company and password are checked against a mysql database. I
have it working with just the username field but I'm confused on how
to go about adding another field. I'm pretty new to PHP so don't beat
me up too much for this example code, I borrowed and hacked it
together in a very short period of time.
Code:
<?php
include 'db.php';
//Checks if there is a login cookie
if(isset($_COOK IE['ID_user']))
//if there is, it logs you in and directs you to the members page
//shopname is used to select the correct database
{
$shopname = $_COOKIE['ID_fitsheetsho p'];
$username = $_COOKIE['ID_fitsheetuse r'];
$pass = $_COOKIE['Key_fitsheet'];
$checkuser = mysql_query("SE LECT * FROM users WHERE username =
'$username'")or die(mysql_error ());
$checkshop = mysql_query("SE LECT * FROM users WHERE shopname =
'$shopname'")or die(mysql_error ());
while($info = mysql_fetch_arr ay($checkuser))
{
if ($pass != $info['password'])
{
die('something is wrong');
}
else
{
header("Locatio n: members.php");
}
}
while($info = mysql_fetch_arr ay($checkshop))
{
if ($pass != $info['password'])
{
die('something is wrong');
}
else
{
header("Locatio n: members.php");
}
}
}
//if the login form is submitted
if (isset($_POST['submit'])) { // if form has been submitted
// makes sure they filled it in
if(!$_POST['shopname'] | !$_POST['username'] | !$_POST['pass']) {
die('You did not fill in a required field.');
}
// checks it against the database
if (!get_magic_quo tes_gpc()) {
$_POST['username'] = addslashes($_PO ST['username']);
$_POST['shopname'] = addslashes($_PO ST['shopname']);
}
$checkuser = mysql_query("SE LECT * FROM users WHERE username = '".
$_POST['username']."'")or die(mysql_error ());
$checkshop = mysql_query("SE LECT * FROM users WHERE shopname = '".
$_POST['shopname']."'")or die(mysql_error ());
//Gives error if user dosen't exist
$check2 = mysql_num_rows( $checkuser);
if ($check2 == 0) {
die('Something is wrong');
}
$check3 = mysql_num_rows( $checkshop);
if ($check3 == 0) {
die('Something is wrong');
}
while($info = mysql_fetch_arr ay($checkuser))
while($info = mysql_fetch_arr ay($checkshop))
{
$_POST['pass'] = stripslashes($_ POST['pass']);
$info['password'] = stripslashes($i nfo['password']);
$_POST['pass'] = md5($_POST['pass']);
//gives error if the password is wrong
if ($_POST['pass'] != $info['password']) {
die('Something is wrong');
}
else
{
// if login is ok then we add a cookie
$_POST['shopname'] = stripslashes($_ POST['shopname']);
$_POST['username'] = stripslashes($_ POST['username']);
$hour = time() + 3600;
setcookie(ID_sh op, $_POST['shopname'], $hour);
setcookie(ID_us er, $_POST['username'], $hour);
setcookie(Key_s hop, $_POST['pass'], $hour);
//then redirect them to the members area
header("Locatio n: members.php");
}
}
}
else {
// if they are not logged in
//code removed for privacy
<form action="<?php echo $_SERVER['PHP_SELF']?>" method="post">
<table border="0">
<tr><td colspan=2><h1>L ogin</h1></td></tr>
<tr><td>Shop Name:</td><td>
<input type="text" name="shopname" size="60" maxlength="60">
<tr><td>Usernam e:</td><td>
<input type="text" name="username" size="2" maxlength="60">
</td></tr>
<tr><td>Passwor d:</td><td>
<input type="password" name="pass" maxlength="50">
</td></tr>
<tr><td colspan="2" align="right">
<input type="submit" name="submit" value="Login">
</td></tr>
</table>
</form>
//code removed
<?php
}
?>
Each company will have its own database, once the user logs in I was
going to check their cookie for the company name and use that to
select the correct database. Does anyone have any better ideas?
Thanks for your time.
