[PHP] Inlogsysteem.
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
<form name="login" method="post" action="">
Username:<br>
<input name="username" type="text" class="login_field" tabindex="1" value="" SELECTED />
<?php
if(isset($_POST['submit']) && $_POST['username'] == ""){
echo "<Script language=\"JavaScript\">window.alert(\"Je hebt geen username ingevoerd\");</script>";
$error='true';
}
?>
Password:<br>
<input name="wachtwoord" type="password" class="login_field" tabindex="2" value="" SELECTED />
<?php
if(isset($_POST['submit']) && $_POST['wachtwoord'] == ""){
echo "<Script language=\"JavaScript\">window.alert(\"Je hebt geen wachtwoord ingevoerd\");</script>";
$error='true';
}
?>
<input name="submit" type="submit" class="button login" tabindex="3" value="" />
<input name="help" type="button" class="button help" tabindex="4" value="" />
<input name="register" onClick="location.href='registreren.php';" type="button" class="button register" tabindex="5" value="" />
</form>
<?php
if($_POST['submit']) {
$username = strip_tags($_POST['username']);
$wachtwoord = md5(strip_tags($_POST['wachtwoord']));
$sql = "SELECT * FROM `users` WHERE username = '".$username."' && password = '".$wachtwoord."'";
$query = mysql_query($sql);
if (mysql_num_rows($query) > 0) {
$_SESSION['login'] = 'ja';
header("Location: http://www.google.nl");
} else {
echo "<Script language=\"JavaScript\">window.alert(\"Ongeldige gebruikersnaam en/of wachtwoord\");</script>";
}
}
?>
Username:<br>
<input name="username" type="text" class="login_field" tabindex="1" value="" SELECTED />
<?php
if(isset($_POST['submit']) && $_POST['username'] == ""){
echo "<Script language=\"JavaScript\">window.alert(\"Je hebt geen username ingevoerd\");</script>";
$error='true';
}
?>
Password:<br>
<input name="wachtwoord" type="password" class="login_field" tabindex="2" value="" SELECTED />
<?php
if(isset($_POST['submit']) && $_POST['wachtwoord'] == ""){
echo "<Script language=\"JavaScript\">window.alert(\"Je hebt geen wachtwoord ingevoerd\");</script>";
$error='true';
}
?>
<input name="submit" type="submit" class="button login" tabindex="3" value="" />
<input name="help" type="button" class="button help" tabindex="4" value="" />
<input name="register" onClick="location.href='registreren.php';" type="button" class="button register" tabindex="5" value="" />
</form>
<?php
if($_POST['submit']) {
$username = strip_tags($_POST['username']);
$wachtwoord = md5(strip_tags($_POST['wachtwoord']));
$sql = "SELECT * FROM `users` WHERE username = '".$username."' && password = '".$wachtwoord."'";
$query = mysql_query($sql);
if (mysql_num_rows($query) > 0) {
$_SESSION['login'] = 'ja';
header("Location: http://www.google.nl");
} else {
echo "<Script language=\"JavaScript\">window.alert(\"Ongeldige gebruikersnaam en/of wachtwoord\");</script>";
}
}
?>
wat doe ik fout want als ik inlogt gaat die niet naar google.nl
Code (php)
1
2
3
2
3
<?php
$sql = "SELECT * FROM `users` WHERE username = '".$username."' && password = '".$wachtwoord."'";
?>
$sql = "SELECT * FROM `users` WHERE username = '".$username."' && password = '".$wachtwoord."'";
?>
wordt:
Code (php)
1
2
3
2
3
<?php
$sql = "SELECT * FROM users WHERE username = '".$username."' AND password = '".$wachtwoord."'";
?>
$sql = "SELECT * FROM users WHERE username = '".$username."' AND password = '".$wachtwoord."'";
?>
En zoek even naar foutafhandeling.
edit:
Van:
Code (php)
1
2
3
4
2
3
4
<?php
$username = strip_tags($_POST['username']);
$wachtwoord = md5(strip_tags($_POST['wachtwoord']));
?>
$username = strip_tags($_POST['username']);
$wachtwoord = md5(strip_tags($_POST['wachtwoord']));
?>
Kun je beter maken:
Code (php)
1
2
3
4
2
3
4
<?php
$username = mysql_real_escape_string($_POST['username']);
$wachtwoord = md5(mysql_real_escape_string($_POST['wachtwoord']));
?>
$username = mysql_real_escape_string($_POST['username']);
$wachtwoord = md5(mysql_real_escape_string($_POST['wachtwoord']));
?>
Beide variabelen alleen nog in de query gebruiken dan.
Gewijzigd op 01/01/1970 01:00:00 door Martijn B
ik heb alles gedaan wat je hebt gezegt, maar nog steeds doet die het niet.
//edit
als jullie nog iets nodig hebben van het script hoor ik het wel. maar hij slaat de users wel op in de database. de wachtwoorden zijn ook gemd5.
Gewijzigd op 01/01/1970 01:00:00 door lorenzo
Dit:
Code (php)
1
2
3
4
5
6
7
8
9
2
3
4
5
6
7
8
9
<?php
$query = mysql_query($sql);
if( $query === false )
{
echo 'ERROR: ' . mysql_error();
exit;
}
?>
$query = mysql_query($sql);
if( $query === false )
{
echo 'ERROR: ' . mysql_error();
exit;
}
?>
//edit
martijn,
hij doet hetzelfde alweer.
Gewijzigd op 01/01/1970 01:00:00 door lorenzo
of
Dit kan wel:
Na de header altijd even exit doen.
Gewijzigd op 01/01/1970 01:00:00 door Martijn B
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
<?php
ini_set('display_errors', 'On');
error_reporting(E_ALL);
?>
<?php
if($_POST['submit']) {
$username = mysql_real_escape_string($_POST['username']);
$wachtwoord = md5(mysql_real_escape_string($_POST['wachtwoord']));
$sql = "SELECT * FROM users WHERE username = '".$username."' AND password = '".$wachtwoord."'";
$query = mysql_query($sql);
if (mysql_num_rows($query) > 0) {
$_SESSION['login'] = 'ja';
header("Location: http://www.google.nl");
exit;
} else {
echo "<Script language=\"JavaScript\">window.alert(\"Ongeldige gebruikersnaam en/of wachtwoord\");</script>";
}
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>PimpSquad - Call Of Duty 4 Clan !!!</title>
<script type="text/javascript">
<!--
function ctRoster(usrName)
{
var collection = usrName;
document.getElementById('rosterData').innerHTML = collection;
}
function ctRosterClean()
{
document.getElementById('rosterData').innerHTML = "";
}
// -->
</script>
<link rel="stylesheet" type="text/css" href="./equality.css" />
</head>
<body>
<!-- eQuality - a free release by Agressions of clantemplates.com-->
<div id="container">
<div id="top_bar"> Design by Psychokid, Script by Renzow</div>
<div id="banner">
<img src="images/banner.jpg" width="946" height="135" alt="team eQuality" />
</div>
<!-- START LEFT SIDE CONTENT -->
<div id="left_side">
<div id="login">
<form name="login" method="post" action="">
Username:<br>
<input name="username" type="text" class="login_field" tabindex="1" value="" SELECTED />
<?php
if(isset($_POST['submit']) && $_POST['username'] == ""){
echo "<Script language=\"JavaScript\">window.alert(\"Je hebt geen username ingevoerd\");</script>";
$error='true';
}
?>
Password:<br>
<input name="wachtwoord" type="password" class="login_field" tabindex="2" value="" SELECTED />
<?php
if(isset($_POST['submit']) && $_POST['wachtwoord'] == ""){
echo "<Script language=\"JavaScript\">window.alert(\"Je hebt geen wachtwoord ingevoerd\");</script>";
$error='true';
}
?>
<input name="submit" type="submit" class="button login" tabindex="3" value="" />
<input name="help" type="button" class="button help" tabindex="4" value="" />
<input name="register" onClick="location.href='registreren.php';" type="button" class="button register" tabindex="5" value="" />
</form>
ini_set('display_errors', 'On');
error_reporting(E_ALL);
?>
<?php
if($_POST['submit']) {
$username = mysql_real_escape_string($_POST['username']);
$wachtwoord = md5(mysql_real_escape_string($_POST['wachtwoord']));
$sql = "SELECT * FROM users WHERE username = '".$username."' AND password = '".$wachtwoord."'";
$query = mysql_query($sql);
if (mysql_num_rows($query) > 0) {
$_SESSION['login'] = 'ja';
header("Location: http://www.google.nl");
exit;
} else {
echo "<Script language=\"JavaScript\">window.alert(\"Ongeldige gebruikersnaam en/of wachtwoord\");</script>";
}
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>PimpSquad - Call Of Duty 4 Clan !!!</title>
<script type="text/javascript">
<!--
function ctRoster(usrName)
{
var collection = usrName;
document.getElementById('rosterData').innerHTML = collection;
}
function ctRosterClean()
{
document.getElementById('rosterData').innerHTML = "";
}
// -->
</script>
<link rel="stylesheet" type="text/css" href="./equality.css" />
</head>
<body>
<!-- eQuality - a free release by Agressions of clantemplates.com-->
<div id="container">
<div id="top_bar"> Design by Psychokid, Script by Renzow</div>
<div id="banner">
<img src="images/banner.jpg" width="946" height="135" alt="team eQuality" />
</div>
<!-- START LEFT SIDE CONTENT -->
<div id="left_side">
<div id="login">
<form name="login" method="post" action="">
Username:<br>
<input name="username" type="text" class="login_field" tabindex="1" value="" SELECTED />
<?php
if(isset($_POST['submit']) && $_POST['username'] == ""){
echo "<Script language=\"JavaScript\">window.alert(\"Je hebt geen username ingevoerd\");</script>";
$error='true';
}
?>
Password:<br>
<input name="wachtwoord" type="password" class="login_field" tabindex="2" value="" SELECTED />
<?php
if(isset($_POST['submit']) && $_POST['wachtwoord'] == ""){
echo "<Script language=\"JavaScript\">window.alert(\"Je hebt geen wachtwoord ingevoerd\");</script>";
$error='true';
}
?>
<input name="submit" type="submit" class="button login" tabindex="3" value="" />
<input name="help" type="button" class="button help" tabindex="4" value="" />
<input name="register" onClick="location.href='registreren.php';" type="button" class="button register" tabindex="5" value="" />
</form>
Die mysq_real... functie op regel 9 kan eigenlijk ook weg...
Gewijzigd op 01/01/1970 01:00:00 door Martijn B
Martijn! schreef op 19.01.2008 13:58:
Regel 4 tm 6 kan weg.
Done.
Martijn! schreef op 19.01.2008 14:02:
En dus ;P
nog steeds doet die het niet!
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
<?php
ini_set('display_errors', 'On');
error_reporting(E_ALL);
# Verbinding met Database opzetten (PHP.net voorbeeld)
# Zelf de gegevens even aanpassen.
$link = mysql_connect('localhost', 'mysql_user', 'mysql_password');
if (!$link) {
die('Not connected : ' . mysql_error());
}
// make foo the current db
$db_selected = mysql_select_db('foo', $link);
if (!$db_selected) {
die ('Can\'t use foo : ' . mysql_error());
}
if( $_SERVER['REQUEST_METHOD'] == 'POST'
&& isset($_POST['username'], $_POST['wachtwoord']) )
{
$sql = "SELECT *
FROM users
WHERE username = '" . mysql_real_escape_string($_POST['username']) . "'
AND password = '" . md5($_POST['wachtwoord']) . "'";
$query = mysql_query($sql);
if( $query === false )
{
echo 'QUERY ERROR! : ' , mysql_error();
exit;
}
if (mysql_num_rows($query) > 0)
{
$_SESSION['login'] = 'ja';
header("Location: http://www.google.nl");
exit;
}
else
{
echo "<Script language=\"JavaScript\">window.alert(\"Ongeldige gebruikersnaam en/of wachtwoord\");</script>";
}
}
?>
ini_set('display_errors', 'On');
error_reporting(E_ALL);
# Verbinding met Database opzetten (PHP.net voorbeeld)
# Zelf de gegevens even aanpassen.
$link = mysql_connect('localhost', 'mysql_user', 'mysql_password');
if (!$link) {
die('Not connected : ' . mysql_error());
}
// make foo the current db
$db_selected = mysql_select_db('foo', $link);
if (!$db_selected) {
die ('Can\'t use foo : ' . mysql_error());
}
if( $_SERVER['REQUEST_METHOD'] == 'POST'
&& isset($_POST['username'], $_POST['wachtwoord']) )
{
$sql = "SELECT *
FROM users
WHERE username = '" . mysql_real_escape_string($_POST['username']) . "'
AND password = '" . md5($_POST['wachtwoord']) . "'";
$query = mysql_query($sql);
if( $query === false )
{
echo 'QUERY ERROR! : ' , mysql_error();
exit;
}
if (mysql_num_rows($query) > 0)
{
$_SESSION['login'] = 'ja';
header("Location: http://www.google.nl");
exit;
}
else
{
echo "<Script language=\"JavaScript\">window.alert(\"Ongeldige gebruikersnaam en/of wachtwoord\");</script>";
}
}
?>
Zelf de database gegevens aanpassen.
maar nu krijg ik weer een error!
Notice: Undefined index: submit in /storage/mijndomein/users/054099/public/sites/www.henk-wijnen.nl/pimp/index.php on line 7
Code (php)
1
if($_POST['submit']) {
dat is rgl 7 :s
Controleren of een formulier is verzonden, kun je beter op de volgende manier doen:
Nu hoeft submit helemaal niet te bestaan, wordt ook niet altijd meegestuurd, er wordt alleen gekeken óf er een post-formulier is verstuurd.