diff --git a/gw-login.php b/gw-login.php new file mode 100644 index 0000000..9740995 --- /dev/null +++ b/gw-login.php @@ -0,0 +1,62 @@ +here
'; //really should automate this +} else { + include_once 'gw-connect.php'; + $con = new mysqli(DATABASE_HOST, DATABASE_USER, DATABASE_PASS, DATABASE_NAME); + $username = mysqli_real_escape_string($con, $_POST['username']); //enable this after username form is built + //$username = 'mauirixxx'; //delete this line after the above is finished + $password = mysqli_real_escape_string($con, $_POST['password']); //enable this after password form is built + //$password = 'drx9175l'; + $password = md5($password); + if ($con->connect_errno > 0){ + die ('Unable to connect to database [' . $db->connect_errno . ']'); + } + $sqllogin = "SELECT * FROM users WHERE users.username = '$username' and password = '$password'"; + if (!$result = $con->query($sqllogin)){ + die ('There was an error running the query [' . $con->error . ']'); + } + while ($row = $result->fetch_array()){ + $uname = $row['username']; + $uid = $row['userid']; + $access = $row['access']; + $_SESSION['username'] = $uname; + $_SESSION['userid'] = $uid; + $_SESSION['access'] = $access; + echo 'Your username is ' . $uname . '. Your userid is ' . $uid . '. Your access level is ' . $access . '.
'; + } +} +# keeping the code below for references material only +/* if(isset($_POST["submit"])){ + if(empty($_POST["username"]) || empty($_POST["password"])){ + $error = "Both fields are required."; + } else { + // Define $username and $password + $username=$_POST['username']; + $password=$_POST['password']; + + // To protect from MySQL injection + $username = stripslashes($username); + $password = stripslashes($password); + $username = mysqli_real_escape_string($con, $username); + $password = mysqli_real_escape_string($con, $password); + $password = md5($password); + + //Check username and password from database + $sql-login="SELECT userid FROM users WHERE users.username = '$username' and password = '$password'"; + $result=mysqli_query($con,$sql-login); + $row=mysqli_fetch_array($result,MYSQLI_ASSOC); + + //If username and password exist in our database then create a session. + //Otherwise echo error. + + if(mysqli_num_rows($result) == 1){ + $_SESSION['username'] = $login_user; // Initializing Session + header("location: gw-toon.php"); // Redirecting To Other Page + } else { + $error = "Incorrect username or password."; + } + } +} */ +?> \ No newline at end of file