Shoutbox

i dont actually get any errors
it just doesnt let me login

code:

---

<?
session_start();
if($_POST['submit'])
{
mysql_connect("localhost","****","****");
mysql_select_db("crimpa_forum");
$user = ($_POST['username']);
$pass = md5($_POST['password']);
$query = mysql_query("SELECT * FROM users WHERE username = '$user' AND password = '$pass' ");
$rows = mysql_num_rows($query);
      if($rows == 1)
      {
      echo 'user logged in successfully';
      $_SESSION['user'] = $user;
      $_SESSION['pword'] = md5($pword);     
      }
      else { echo 'incorrect username or password'; }
}
else
{
?>
<form method="post" action="login.php">
<TABLE>
<TR>
   <TD valign="top">Username/TD>
   <TD><INPUT NAME='username' TYPE='TEXT' VALUE='' size=30 maxlength="30"></TD>
</TR>
<TR>
   <TD valign="top">Password</TD>
   <TD><INPUT NAME='password' TYPE='password' VALUE='' size=30 maxlength="16">
</TR><br>
   <TD valign="top"></TD>
   <TD><INPUT TYPE="submit" name="submit" value="submit"></TD>
</TR>
</TABLE>
</form>
<?
}
?>

---

quote:

---

Originally posted by leejeffery
$_SESSION['pword'] = md5($pword); 

---

I don't kno wmuch PHP, but shouldn't that line be $_SESSION['pword'] = $pass ?

yeh ur right
still wont login mind ¬_¬

I suggest you do such debug:

1. echo the query ( "SELECT * FROM users WHERE username = '$user' AND password = '$pass' " ) to see if the query was executed correctly
2. echo $rows

better than echo for an array: print_r

bach_m, his $rows is the number of the rows of the result of the query, not the rows themselves

in case you didnt know, i was using this code because i was scripting my own forum but this login code just doesnt want to work and if people cant login then why bother. so i sort of gave up on making it
if anyone could get it to work i would continue