Simple PHP Login Help..

[Jaquio]

Alright, I have been trying an trying there are a few threads out there from where I have tried to make one. It seemed to work, but it actually didn't.. :( Anyways, I want to make a simple login/logout script. Using a Functions.php file holding the login an logout functions. While in the other file, has the login page, an the logout. Something kinda like this.

Functions.php

<?php
require("Header.php");

//Logs you into the site.
Function Login($User, $Pass, $MinRank, $mID){
global $MyRow;

$result = @mysql_query("SELECT * FROM Members WHERE Username = '$User'");
$MyRow = mysql_fetch_array($result);

if($MyRow != Null){
extract($MyRow);
}

if($User == $Username && $Pass == $Password and $Username != NULL){

if($Rank >= $MinRank){
return 1;
} else {
echo("Logged in!, Rank isn't high enough.");
}
} else {

if($mID == 0){
echo("<br><center>
<form action=User_CMD.php method=POST>
Username:<input type=username name=Username>
<br>
Password:<input type=password name=Password>
<br>
<input type=submit value='Login'>
</form></center>
");
} else {
echo("Not Logged in!, mID != 0");
}

}
}

//Logs you out of the site.
Function Logout($User){
//Place logout stuff here.
echo("You are now logged out!");
}

?>


An here is the other.

User_CMD.php

<?php

require("Functions.php");

$Action = $_GET["Action"];

if($Action == NULL){
if(Login($Username, $Password, 0, 0) == 1){
//Display Profile, Console, Private News an whatever else here.
echo("<br>
<center>
Logged in!
</center>
<br>
");
}
}

if($Action == "Logout"){
if(Login($User, $Pass, 0, 0) == 1){
Logout($Username);
}
}

require("Footer.php");

?>



How could I possibly add-in cookies or sessions doesn't matter which ones I use peferably sessions though. Just as long as the user can login an out.

[Jaquio]

Anyone? :(

Perhaps, you could just show me some code for a simple login using cookies or sessions, or show me how to do it. :(

[penagate]

The login process is fairly simple:

- Accept username and password.
- MD5() password.
- Check MD5 against stored hash for that username in the DB.
- If equal, set a boolean session flag.

$username = $_POST['username'];
$password_md5 = md5($_POST['password']);

$userdata = @mysql_query(
'select `password_md5`from `users` where `username` = \''.$username.'\''
);

if (mysql_errno()) {
// user does not exist in DB
}
else {
$password_hash = mysql_result($userdata, 0);

if ($password_hash == $password_md5) {
// successful login
$_SESSION['logged-in'] = true;
}
}


That's in the simplest form. Remember you need to call session_start() before all that and before any output is sent.

[Jaquio]

Thank you so much! I actually got it working, an you it actually logs you out this time. Thanks alot :). I just put this in my header file,


session_start();
if($_SESSION["UserSes"] == NULL && $_SESSION["Logged-In"] == 0){
$_SESSION["UserSes"] = $Username;
}

if($_SESSION["PassSes"] == NULL && $_SESSION["Logged-In"] == 0){
$_SESSION["PassSes"] = $Password;
}

if($Username == $_SESSION["UserSes"] && $_SESSION["Logged-In"] == 1){
if($Password == $_SESSION["PassSes"] && $_SESSION["Logged-In"] == 1){
$_SESSION["UserSes"] = $Username;
$_SESSION["PassSes"] = $Password;
$_SESSION["Logged-In"] = 1;
}
}


An it worked fine, when I login I clear the sessions so if their wrong(bad login) they don't stick. An my logout function works perfectly as well, thanks again. :)

[penagate]

No problems :)