Page 1 of 1

login script

Posted: Sat Feb 08, 2014 2:01 pm
by etsted
every time i log in i get a good message displaying, you have been logged in, but then when i try to click on another link it automatically loges me out why?

<?php
session_start();
?>
<html>
<head>
<link href='style/style.css' rel='stylesheet' type="text/css" />
<title>Login</title>
<meta name='login' content='login to itsnature' />
<meta name='keywords' content='login' />
</head>
<body>
<h1>Login</h1>
<?php
require_once "connect.php";
// sets a navigator
if(isset($username))
{
include "navigator/navigator_login.php";
}
else
{
include "navigator/navigator.php";
}
// login form
$login = "<form action='login.php' method='POST' name='login1' class='forgotpass'>
<input type='text' name='username' placeholder='Username' /> <br />
<input type='password' name='password' placeholder='Password' />
<input type='submit' name='submit' value='Login' /> |
<a href='register.php'>Register</a>
</form>";
// includes a navigator


if(isset($username))
{
echo "<p>Welcome $username.</p> <br />";
}
else
{
if(isset($_POST['username']) && isset($_POST['password']))
{
$username = mysqli_real_escape_string($con, $_POST['username']);
$password = mysqli_real_escape_string($con, $_POST['password']);
}

if(isset($username) && isset($password))
{
$password = md5($password);
$query = mysqli_query($con ,"SELECT * FROM users WHERE username='$username' && password='$password'");
$numrows = mysqli_num_rows($query);
if($numrows != 0)
{
$_SESSION['username'] = $username;
echo "<p>You have been logged in.</p> <br />";
}
else
{
echo "<p>Wrong password or username.</p>$login";
}
}
else
{
echo "<p>You must register an account in order to login.</p>$login";
}
}
mysqli_close($con);
?>

Re: login script

Posted: Sat Feb 08, 2014 2:11 pm
by social_experiment
you need some type of authentication check; see if $_SESSION['username'] is set and is so, user is logged in

Re: login script

Posted: Sat Feb 08, 2014 3:14 pm
by etsted
yes, but look at where i have placed a navigator. It should show a navigator_login.php instead it shows me navigator.php, even though i have loged in

Re: login script

Posted: Sat Feb 08, 2014 3:43 pm
by social_experiment
whether $username is set or not determines which is displayed; change $username to $_SESSION['username'] and see what happens

Code: Select all

<?php
if(isset($username))
{
include "navigator/navigator_login.php";
}
else 
{
include "navigator/navigator.php";
}
?>