plz hlp me for regarding multiple user login from one page

utpal407 0 Newbie Poster · 2012-04-25T19:02:18+00:00

please help me its very urgent...

Dani · 2012-04-25T20:34:58+00:00

No one can help you because you didn't format your post correctly. I fixed your code for you this time. From now on, please use the Code button when formatting code so that it is readable.

diafol · 2012-04-25T21:27:28+00:00

Posting a lump of code isn't going to help much either. What's the problem?

BTW - you don't need all those queries - one will do.
Also, next time don't bother posting all the CSS - pointless.

weekendrockstar 12 Junior Poster in Training · 2012-04-25T21:57:39+00:00

To start:

<?php
session_start();
$query = mysql_query("SELECT * FROM tbl_login WHERE user_name='$user_name' and password='$password'");
$rows = mysql_num_rows($query);

  while ($login_info = mysql_fetch_array($query)) {
   $user_level = $login_info['user_level'];
  }

  if ($rows < 1) {
   echo "Incorrect login credentials";
  }else{
   $_SESSION['user_name'] = $user_name;
   $_SESSION['password'] = $password;
   $_SESSION['user_level'] = $user_level;

   WHATEVER YOU WANT DONE AFTER SUCCESSFUL LOGIN.
  }



?>

You need only one query. Granted you can write more if/ifelse/else conditional statements to make it more clear to the user whether it was a wrong username (if username is not found), incorrect password for that user name or both. But I'm not going that far with this.

I wouldn't like to use if->empty statements. I go with mysql_num_rows to count the number of rows returned and if it returns more than one (and should probably be ONLY one) matching row.

You may not want to store the password in the SESSION but I am doing so here anyway. But then any other page that you want to see if they are logged in for access is writing a function that checks to see if that person has a session user_name variable which would mean that they have successfully logged in and should be able to view that page also. Just call that function at the top of any page where you want logged-in state to be checked.

One security problem is that you shouldn't store unhashed/unencrypted passwords in the database for correct comparison. You should use an ecryption hash to use at least md5 (using a SALT is up to you).

Then your original query should only search for rows with that specific username and then pull in the encrypted password in the WHILE where we are also collecting that member's user level. Then do another if/else statement... you encrypt the password using the same hash that was used on the password in the database and then you check that the newly encrypted submitted password matches what is in the password field for the matching row.

utpal407 0 Newbie Poster · 2012-04-26T07:48:15+00:00

sorry for bothering you all but i m new in php and m still a student so please mercy all my faults... n thanks alot all of you..let me try this now...

utpal407 0 Newbie Poster · 2012-04-26T07:51:46+00:00

itz not working friend..

diafol · 2012-04-26T08:23:16+00:00

@utpal - you need to be more specific with your feedback. Just saying that something doesn't work isn't enough. Which bit of the code is falling down? Place some echo lines here and there to watch the variable values - that should help you resolve matters.