username and password verification

[ravi951]

hi all,
my database name is "test".in the "test" database
i have created a table name called "log" which has two fields
namely username and password.
i have given username as "admin" and password as "admin123".
now i have written one code using php so that when i click the submit button both the username as "admin" and password as "admin123" gets matched then it should direct to the next page...
tell me how to check whether username and passwords are matching and if it matches it must point to the action part what we give in <form method="POST" action="www.php">
kindly tell me what i must add to the below program.....
below is the code in php......

<?php
$host="localhost";  
$username="root";  
$password="";  
$db_name="test"; 
$tbl_name="log"; 

mysql_connect("$host", "$username", "$password")or die("cannot connect"); 
mysql_select_db("$db_name")or die("cannot select DB");
 
$myusername=$_POST['myusername']; 
$mypassword=$_POST['mypassword'];

$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row
if($count==1)
{
// Register $myusername, $mypassword and redirect to file "login_success.php"
session_register("myusername");
session_register("mypassword"); 
header("location:login_success.php");
}
else 
{
echo "Wrong Username or Password";
}
?>

[dclamp]

Your code looks fine. You just need to add some sessions.

<?php

//this should be at the top of your page:
session_start();

//when you have authenticated your user, do this:
$_SESSION['username'] = $myusername;
//including any other session variables you may use later on, maybe timestamp, userid, etc


//use the following to verify they are logged in on the pages you wish to protect:
if ($_SESSION['username'] == NULL) {
     header("Location: login.php");
}
//this will check to see if there is a set username, if not, it will redirect them to login

//logging out is just setting the session to null or destroying the sessions:
$_SESSION['username'] == NULL;

//or
session_destroy();