1
I'm working on a login script and I am pulling out my hair trying to figure out why I can never seem to get my cookie set I will post my code below and hope someone with a much larger I.Q. can help me figure out my problem/problems.
Expand|Select|Wrap|Line Numbers
- <?php include ('../../Connections/login_db.php');?>
- <?php
- error_reporting(E_ALL);
- ini_set("display_errors", true);
- header("Content-Type: text/plain");
- if(isset($_COOKIE['ID_my_site']))
- //if there is, it logs you in and directes you to the members page
- { $username = $_COOKIE['ID_my_site'];
- $pass = $_COOKIE['Key_my_site'];
- $check = mysql_query("SELECT * FROM users WHERE username = '$username'")or die(mysql_error());
- while($info = mysql_fetch_array( $check ))
- {
- if ($pass != $info['password'])
- {
- die ('blah');
- }
- else
- {
- header ('location:../admin.php');
- }
- }
- }
- //if the login form is submitted
- if (isset($_POST['submit'])) { // if form has been submitted
- // makes sure they filled it in
- if(!$_POST['username'] | !$_POST['pass']) {
- die('You did not fill in a required field.');
- }
- // checks it against the database
- if (!get_magic_quotes_gpc()) {
- $_POST['email'] = addslashes($_POST['email']);
- }
- $check = mysql_query("SELECT * FROM users WHERE username = '".$_POST['username']."'")or die(mysql_error());
- //Gives error if user dosen't exist
- $check2 = mysql_num_rows($check);
- if ($check2 == 0) {
- die('That user does not exist in our database.
- <p><a href=add.php>Click Here to Register</a>');
- }
- while($info = mysql_fetch_array( $check ))
- {
- $_POST['pass'] = stripslashes($_POST['pass']);
- $info['password'] = stripslashes($info['password']);
- $_POST['pass'] = md5($_POST['pass']);
- //gives error if the password is wrong
- if ($_POST['pass'] != $info['password']) {
- die('Incorrect password, please try again.');
- }
- else
- {
- // if login is ok then we add a cookie
- setcookie("ID_my_site", ($_POST['username']), time()+60*60*24*30, "/");
- setcookie("Key_my_site",($_POST['pass']), time()+60*60*24*30, "/");
- //**when domain is specified and form is submitted I wind up with a forever loading page and upon refreshing it I wind up with a page cannot be displayed error.
- //then redirect them to the members area
- header("location: ../admin.php");
- exit;
- }
- }
- }
- else
- {
- // if they are not logged in
- ?>
- <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
- <html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <meta name="robots" content="noindex,nofollow"/>
- <title>Administrator logon</title>
- <link href="../../page.css" rel="stylesheet" type="text/css" />
- </head>
- <body>
- <div id="container">
- <div id="header"><?php include ("../../login_header.php") ?></div>
- <div id="photoNav"><?php include ("../../mainNav.php") ?></div>
- <div id="tableContent">
- <div class="bold_16" style="margin-top:40px">Administrator Login</div>
- <div class="padding_top"><div style="padding-top:10px; text-align:center;">
- </div>
- <form action="" method="post">
- <table border="0" align="center">
- <tr><td colspan=2><div class="bold_14" style="padding-bottom:20px;">Please enter your login information</div></td></tr>
- <tr><td>Username:</td><td>
- <input name="username" type="text" size="23" maxlength="40">
- </td></tr>
- <tr><td>Password:</td><td>
- <input name="pass" type="password" size="24" maxlength="50">
- </td></tr>
- <tr><td colspan="2" align="right">
- <input type="submit" name="submit" value="Login">
- </td></tr>
- </table>
- </form>
- <?php
- }
- ?>
