Little help please with my project

Discussion in 'PHP' started by DeadlyMan, Oct 9, 2010.

  1. #1
    HI

    I'M MAKING SMALL PROJECT AND I HAVE SOME PROBLEM WITH MY PROJECT

    THAT I WANT TO KNOW IF USER IN DATABASE AND IF THE USER IS IS

    THE PHP PRINT SUCCESS MESSAGE AND GIVE ME INFO ABOUT THE USE

    HERE MY CODING


    
    
    
    <?php
    
    include("./db.php");
     $link = mysql_connect($server, $user, $pass);
     if(!mysql_select_db($database)) die(mysql_error());
    
    $result = mysql_query("SELECT * FROM `members`");
    $r = mysql_fetch_array($result);
    
    $username = $r['username'];
    $password = $r['password'];
    $email = $r['email'];
    
    //$keya=md5($_GET["key"]);
    
    if (isset($_GET["key"]))  {
    
       $key = $_GET["key"];
    
    
    			 $q = "SELECT username FROM `members` WHERE (username = '$key')";
                 if(!($result_set = mysql_query($q))) die(mysql_error());
                 $number = mysql_num_rows($result_set);
    
                 if ($number) {
                     
    				print "USER FOUND  !"; 
    				print "</br>";
    				print "Mr  $username";
    				print "</br>";
    				print $password;
    				print "</br>";
    				print $email;
                     
                 }
                 else {
    				print "Sorry ! User Not Found "; 
    }
    }
    ?>
    
    
    Code (markup):

    AND THE SQL IS IN ATTACH
     

    Attached Files:

    DeadlyMan, Oct 9, 2010 IP
  2. JoelLarson

    JoelLarson Peon

    Messages:
    61
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #2
    <?php
    
    // Database connection stuff.
    include("./db.php");
    $link = mysql_connect($server, $user, $pass);
    if(!mysql_select_db($database, $link))
    	die(mysql_error());
    
    // Retrieve $_POST['username']/$_POST['password'] and sanitise!!
    $username = filter_input(INPUT_POST, 'username', FILTER_SANITIZE_SPECIAL_CHARS);
    $password = filter_input(INPUT_POST, 'password', FILTER_SANITIZE_SPECIAL_CHARS);
    
    // Select the member where the username is submitted and sha1+salt password exists.
    $sql = sprintf("SELECT * FROM `members` WHERE `username` = '%s' AND `password` = '%s' LIMIT 0, 1;", $username, sha1($password + 'salt'));
    
    // Query the database.
    $query = mysql_query($sql);
    
    // If a user was found..
    if(mysql_num_rows($query) > 0)
    {
    	// Turn the resource into an object.
    	$result = mysql_fetch_object($query);
    
    	// Echo out our findings.
    	echo "The user {$result->username} exists!\n<br />\n".
    	"The password in the SHA1 salt matched the database.\n<br />\n".
    	"Their email is: {$result->email}";
    }
    else
    {
    	// The user wasn't found.
    	echo "Sorry, the user didn't exist!"
    }
    Code (markup):
     
    JoelLarson, Oct 9, 2010 IP