Is my Login PHP correct, its not working? (logout....)?

E

Erick Rodriguez

New member
-----------INDEX.PHP


<?php
error_reporting(E_ALL | E_STRICT);
ini_set('display_errors', True);

session_start();
?>

<html>
<head>
<title>My login</title>
</head>
<body>
<div></div>
<?php if (isset($_SESSION['username'])) { ?>
You are now logged in
<a href="index.php">Logout</a>
<?php } else { ?>
<form action="login.php" method="post">
username: <input name="username" type="text" />
password: <input name="password" type="password" />
<input type="submit" />
</form>
<?php } ?>
<!-- Output Error -->
<?php if (in_array('error',$_SESSION)) echo $_SESSION['error']; unset($_SESSION['error']); ?>
</body>
</html>


-----------LOGIN.PHP

<?php
session_start();

$db_host = 'localhost';
$db_user = 'lottopo1_login';
$db_pass = '';
$db_db = 'lottopo1_login';



if (isset($_POST['username']))
{
// Mysql Connection
$db_link = mysql_connect($db_host, $db_user, $db_pass)
or die('MySQl Connection Error:'.mysql_error());
mysql_select_db($db_db)
or die('MySQL Error: Cannot select table');

$username = mysql_real_escape_string($_POST['username']);
$password = mysql_real_escape_string($_POST['password']);

// MySQL Query
$result = mysql_query("SELECT * FROM login
WHERE username = '$username' AND password = '$password' ");

if(!$result) {
$_SESSION['error'] = '<span style="color: red">Login Failed</span>';
} else {
// Mysql fetch row results
$row = mysql_fetch_assoc($result);

$_SESSION['userid'] = $row['id'];
$_SESSION['username'] = $username;
$_SESSION['error'] = 'Login successful<br> Welcome, '.$username;
}
mysql_close($db_link);

}

header('Location: ./')
?>


--------------LOGOUT.PHP

<?php
session_start();

if (isset($_GET['logout']))
{
$_SESSION = array();
if ($_COOKIE[session_name()])
{
setcookie(session_name(), '', time()-42000, '/');
}
session_destroy();
header('Location: login.php');
}

?>
 
Back
Top