First time PHP Login

Hey guys, I'm brand new to PHP (have been coding for about 2 days).

I made a simple form that pulls from a MySQL database, it worked fine and dandy. I tried to password protect it and it just keeps giving me the error message that I defined for a wrong password.

#1 Here's my code:

Expand|Select|Wrap|Line Numbers

  
<?php
 
include 'dbc.php';
 
$passfromhtml = $_POST["passhtml"];

$emailfromhtml = $_POST["emailhtml"];
 
$password_select = mysql_query("SELECT pwd FROM client WHERE client_email = '$emailfromhtml'");
 
if($passfromhtml == $password_select) 

{
 
$q=$_GET["q"];
 
$data_array = mysql_query("SELECT * FROM client WHERE client_email = '".$q."'");

while($row = mysql_fetch_array($data_array))

{

$id = $row['id'];

$full_name = $row['full_name'];

$company_name = $row['company_name'];

$client_email = $row['client_email'];

$designer_email = $row['designer_email'];

$user_level = $row['user_level'];

$pwd = $row['pwd'];

$address = $row['address'];

$country = $row['country'];

$tel = $row['tel'];

$fax = $row['fax'];

$website = $row['website'];

$temp_website = $row['temp_website'];

$price = $row['price'];

$price_per_hour = $row['price_per_hour'];

$percent_done = $row['percent_done'];

$hours_worked = $row['hours_worked'];

$services = $row['services'];

$additional = $row['additional'];

$status = $row['status'];

}
 
$total_cost = $price_per_hour * $hours_worked ;
 
echo <<<HTML
 
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<title>Admin Panel</title>

<link href="css/admin.css" rel="stylesheet" type="text/css">

<script type="text/javascript">

function showUser(str)

{

if (str=="")

  {

  document.getElementById("panel").innerHTML="";

  return;

  } 

if (window.XMLHttpRequest)

  {// code for IE7+, Firefox, Chrome, Opera, Safari

  xmlhttp=new XMLHttpRequest();

  }

else

  {// code for IE6, IE5

  xmlhttp=new ActiveXObject("Microsoft.XMLHTTP");

  }

xmlhttp.onreadystatechange=function()

  {

  if (xmlhttp.readyState==4 && xmlhttp.status==200)

    {

    document.getElementById("panel").innerHTML=xmlhttp.responseText;

    }

  }

xmlhttp.open("GET","admin_cp.php?q="+str,true);

xmlhttp.send();

}

</script>

</head>

<body>

<div id="panel">

<p>&nbsp;</p>

<p>

<form>

<select name="users" onchange="showUser(this.value)">

<option value="">Select a person:</option>

<option value="biondizzle@gmail.com">Michael Biondi</option>

<option value="saltolve@gmail.com">Salvatore Tolve</option>

<option value="3">Glenn Quagmire</option>

<option value="4">Joseph Swanson</option>

</select>

</form>

$company_name | <a href=http://$temp_website target=_blank>My Websites progress</a> | Send Message to my designer |</p>

<hr />
 
<ol>
 
<li>

<div class="left">

<p>

<b>Client ID:</b> $id <br />

<b>Company Name:</b> $company_name <br />

<b>Email:</b> $client_email <br />

<b>Website Price:</b> $price <br />

<b>Price Per Hour:</b> $price_per_hour <br />

<b>Percentage Done:</b> $percent_done <br />

<b>Services:</b><br />

$services<br />

<b>Additional Comments:</b><br />

$additional<br />

<b>Hours Worked:</b> $hours_worked <b>Total Cost:</b> $total_cost

</p>

</div>

</li>
 
<li>

<div class="middle">

<p>

<h2>Status Update to Client:<h2><br />

<textarea name="textarea" id="textarea" cols="25" rows="5"></textarea>

</p>

</div>

</li>
 
<li>

<div class="right">

<p>

<h2>Status:<h2><br />

$status

</p>

</div>

</li>
 
</ol>

</div>

</body>

</html>
 
HTML;

}

else

{

echo "Wrong password dipshit";

}

?>

and #2:
here's the link for you guys to see what I mean:

http://btdstudios.com/login.html
Try to log in as me:
<removed for your safety>

Like I said, I'm pretty new to PHP, so take it easy on me :) Thanks a bunch guys!

Jan 5 '12 #1

Subscribe Post Reply

1473

Rabbit

12,516

Expert Mod 8TB

You may want to take down your login info... Someone can do bad things with it.

Jan 5 '12 #2

Dormilich

8,658

Expert Mod 8TB

I tried to password protect it and it just keeps giving me the error message that I defined for a wrong password.

that’s because you compare apples with pears. while $passfromhtml is indeed the password (a string) $password_select is a resource (a different data type). you either need to fetch the data from the mysql resource or (better) test inside mysql for a match.

ex. (this code may look like overkill, but this is necessary to prevent SQL Injection attacks. besides that is allows a graceful degadation, should your database fail (and you don’t give out system details in case of an error))

Expand|Select|Wrap|Line Numbers

 try

{

  // connect

  $pdo = new PDO("mysql:host=localhost;dbname=my_database", $login, $pass);

  // enable error handling

  $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

  // create a safe query

  $ps = $pdo->prepare("SELECT COUNT(*) FROM client WHERE client_email = :mail AND pwd = :pass");

  // submit user data

  $ps->bindValue("mail", $_POST["emailhtml"], PDO::PARAM_STR);

  $ps->bindValue("pass", $_POST["passhtml"], PDO::PARAM_STR);

  // get result

  $ps->execute();

  $logged_in = (bool) $ps->fetchColumn();

}

catch (Exception $e)

{

  // apologise to users

  echo "<p>Sorry, an error occurred</p>";

  // send details to you

  mail("admin@example.com", "error", $e->getMessage(), "From: noreply@example.com");

}
 
// proceed

if ($logged_in)

{

  // …

}

Jan 5 '12 #3

by: Slide-O-Mix | last post by:

I am using the Process class to run an external application from my application. The first time I call the .Start() method it takes several seconds for the process to actually start. Subsequent...

.NET Framework

Runs Slow The First Time

by: Steve Bishop | last post by:

I have an application that uses data access that runs slow the first time. My first page reads data from an ODBC source and the second page hits a MSDE database. After each page opens the first...

C# / C Sharp

Events not firing (First time only) in a dynamic user control. Please help.

by: Shourie | last post by:

I've noticed that none of the child controls events are firing for the first time from the dynamic user control. Here is the event cycle. 1) MainPage_load 2) User control1_Load user clicks a...

ASP.NET

performance ( slow at the first time )

by: BK Kim | last post by:

Hello. I have made my aspx websites and I realized that my application is running slow at the first time but next time, it is very fast. Is it because the codes are compiled at the first time?...

ASP.NET

IIS hangs the first time two requests are made for same page quick

by: Brad Quinn | last post by:

It appears that IIS hangs the first time two requests are made for same page in quick succession. Although it may very well be something else I'm doing wrong. I have a page (ViewDocument.aspx)...

ASP.NET

ASP.NET application and first time load

by: Jason | last post by:

Hi I have a "problem" i have got a ASP.NET application. in this application i have included logging. in the logging i have logged how many seconds it takes for this application to fully load....

ASP.NET

an old geezer running visual studio for the first time

by: TB | last post by:

Hi all: If you think that the following comments are absolute amateurish, then please bear with me, or simply skip this thread. A couple of months back I made the decision to initiate a...

ASP.NET

Redirect not working first time in classic ASP

by: Andrew Poulos | last post by:

I have a simple page with a form in it that gets posted to the following ASP <%@ language="javascript" %> <% var login_success_page = "../intro.asp"; var login_failed_page =...

ASP / Active Server Pages

Showing a winform in Excel is slow the first time

by: Torben Laursen | last post by:

I have a COM shared add-in written in C# that I use in Excel. One of the thinks that the user can do is to open some winforms. The problem that I have is that the first time the user opens a...

C# / C Sharp

Session works, just not the first time

by: ArizonaJohn | last post by:

Hello, On my site, a user enters a value into a form, and if that value is not in my database, the code below is meant to give the user the message "The topic "value" has not been added. Add the...

PHP

Batch import of multiple excel files into the database

by: ryjfgjl | last post by:

If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...

Data Management

Merging data from multiple Excel files

by: ryjfgjl | last post by:

In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...

Data Management

Migrating Website to Cloud - Emmanuel Katto

by: emmanuelkatto | last post by:

Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel

General

Navigating the Data Structures and Algorithms (DSA)

by: BarryA | last post by:

What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...

Algorithms / Advanced Math

Looking to do Android software development, any suggestions? Is flutter better?

by: nemocccc | last post by:

hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?

General

Is that possible of reading the .csv file in column wise and the column have different lengths ?

by: Sonnysonu | last post by:

This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...

C / C++

How to build RAID in BIOS?

by: Hystou | last post by:

There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...

Computer Hardware

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...

C / C++

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...

Online Marketing

First time PHP Login

Similar topics