Jump to content

Cant Log In

- - - - -

  • Please log in to reply
2 replies to this topic

#1
MaD-DoC

MaD-DoC

    Newbie

  • Members
  • Pip
  • 3 posts
I cant Log in always says worng username or password
please help..
thank you..

login.php
<?php

require_once '../library/config.php';

require_once './library/functions.php';


$errorMessage = ' ';


if (isset($_POST['txtUserName'])) {

	$result = doLogin();

	

	if ($result != '') {

		$errorMessage = $result;

	}

}


?>

<html>

<head>

<title>Shop Admin - Login</title>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">

<link href="include/admin.css" rel="stylesheet" type="text/css">

</head>

<body>

<table width="750" border="0" align="center" cellpadding="0" cellspacing="1" class="graybox">

 <tr> 

  <td><img src="include/banner-top.gif" width="750" height="75"></td>

 </tr>

 <tr> 

  <td valign="top"> <table width="100%" border="0" cellspacing="0" cellpadding="20">

    <tr> 

     <td class="contentArea"> <form method="post" name="frmLogin" id="frmLogin">

       <p> </p>

       <table width="350" border="0" align="center" cellpadding="5" cellspacing="1" bgcolor="#336699" class="entryTable">

        <tr id="entryTableHeader"> 

         <td>:: Admin Login ::</td>

        </tr>

        <tr> 

         <td class="contentArea"> 

		 <div class="errorMessage" align="center"><?php echo $errorMessage; ?></div>

		  <table width="100%" border="0" cellpadding="2" cellspacing="1" class="text">

           <tr align="center"> 

            <td colspan="3"> </td>

           </tr>

           <tr class="text"> 

            <td width="100" align="right">User Name</td>

            <td width="10" align="center">:</td>

            <td><input name="txtUserName" type="text" class="box" id="txtUserName" value="admin" size="10" maxlength="20"></td>

           </tr>

           <tr> 

            <td width="100" align="right">Password</td>

            <td width="10" align="center">:</td>

            <td><input name="txtPassword" type="password" class="box" id="txtPassword" value="admin" size="10"></td>

           </tr>

           <tr> 

            <td colspan="2"> </td>

            <td><input name="btnLogin" type="submit" class="box" id="btnLogin" value="Login"></td>

           </tr>

          </table></td>

        </tr>

       </table>

       <p> </p>

      </form></td>

    </tr>

   </table></td>

 </tr>

</table>

<p> </p>

</body>

</html>


function.php
<?php


/*

	Check if a session user id exist or not. If not set redirect

	to login page. If the user session id exist and there's found

	$_GET['logout'] in the query string logout the user

*/

function checkUser()

{

	// if the session id is not set, redirect to login page

	if (!isset($_SESSION['plaincart_user_id'])) {

		header('Location: ' . WEB_ROOT . 'admin/login.php');

		exit;

	}

	

	// the user want to logout

	if (isset($_GET['logout'])) {

		doLogout();

	}

}


/*

	

*/

function doLogin()

{

	// if we found an error save the error message in this variable

	$errorMessage = '';

	

	$userName = $_POST['txtUserName'];

	$password = $_POST['txtPassword'];

	

	// first, make sure the username & password are not empty

	if ($userName == '') {

		$errorMessage = 'You must enter your username';

	} else if ($password == '') {

		$errorMessage = 'You must enter the password';

	} else {

		// check the database and see if the username and password combo do match

		$sql = "SELECT user_id

		        FROM tbl_user 

				WHERE user_name = '$userName' AND user_password = PASSWORD('$password')";

		$result = dbQuery($sql);

	

		if (dbNumRows($result) == 1) {

			$row = dbFetchAssoc($result);

			$_SESSION['plaincart_user_id'] = $row['user_id'];

			

			// log the time when the user last login

			$sql = "UPDATE tbl_user 

			        SET user_last_login = NOW() 

					WHERE user_id = '{$row['user_id']}'";

			dbQuery($sql);


			// now that the user is verified we move on to the next page

            // if the user had been in the admin pages before we move to

			// the last page visited

			if (isset($_SESSION['login_return_url'])) {

				header('Location: ' . $_SESSION['login_return_url']);

				exit;

			} else {

				header('Location: index.php');

				exit;

			}

		} else {

			$errorMessage = 'Wrong username or password';

		}		

			

	}

	

	return $errorMessage;

}


/*

	Logout a user

*/

function doLogout()

{

	if (isset($_SESSION['plaincart_user_id'])) {

		unset($_SESSION['plaincart_user_id']);

		session_unregister('plaincart_user_id');

	}

		

	header('Location: login.php');

	exit;

}



/*

	Generate combo box options containing the categories we have.

	if $catId is set then that category is selected

*/

function buildCategoryOptions($catId = 0)

{

	$sql = "SELECT cat_id, cat_parent_id, cat_name

			FROM tbl_category

			ORDER BY cat_id";

	$result = dbQuery($sql) or die('Cannot get Product. ' . mysql_error());

	

	$categories = array();

	while($row = dbFetchArray($result)) {

		list($id, $parentId, $name) = $row;

		

		if ($parentId == 0) {

			// we create a new array for each top level categories

			$categories[$id] = array('name' => $name, 'children' => array());

		} else {

			// the child categories are put int the parent category's array

			$categories[$parentId]['children'][] = array('id' => $id, 'name' => $name);	

		}

	}	

	

	// build combo box options

	$list = '';

	foreach ($categories as $key => $value) {

		$name     = $value['name'];

		$children = $value['children'];

		

		$list .= "<optgroup label=\"$name\">"; 

		

		foreach ($children as $child) {

			$list .= "<option value=\"{$child['id']}\"";

			if ($child['id'] == $catId) {

				$list.= " selected";

			}

			

			$list .= ">{$child['name']}</option>\r\n";

		}

		

		$list .= "</optgroup>";

	}

	

	return $list;

}


/*

	If you want to be able to add products to the first level category

	replace the above function with the one below

*/

/*


function buildCategoryOptions($catId = 0)

{

	$sql = "SELECT cat_id, cat_parent_id, cat_name

			FROM tbl_category

			ORDER BY cat_id";

	$result = dbQuery($sql) or die('Cannot get Product. ' . mysql_error());

	

	$categories = array();

	while($row = dbFetchArray($result)) {

		list($id, $parentId, $name) = $row;

		

		if ($parentId == 0) {

			// we create a new array for each top level categories

			$categories[$id] = array('name' => $name, 'children' => array());

		} else {

			// the child categories are put int the parent category's array

			$categories[$parentId]['children'][] = array('id' => $id, 'name' => $name);	

		}

	}	

	

	// build combo box options

	$list = '';

	foreach ($categories as $key => $value) {

		$name     = $value['name'];

		$children = $value['children'];

		

		$list .= "<option value=\"$key\"";

		if ($key == $catId) {

			$list.= " selected";

		}

			

		$list .= ">$name</option>\r\n";


		foreach ($children as $child) {

			$list .= "<option value=\"{$child['id']}\"";

			if ($child['id'] == $catId) {

				$list.= " selected";

			}

			

			$list .= ">  {$child['name']}</option>\r\n";

		}

	}

	

	return $list;

}

*/


/*

	Create a thumbnail of $srcFile and save it to $destFile.

	The thumbnail will be $width pixels.

*/

function createThumbnail($srcFile, $destFile, $width, $quality = 75)

{

	$thumbnail = '';

	

	if (file_exists($srcFile)  && isset($destFile))

	{

		$size        = getimagesize($srcFile);

		$w           = number_format($width, 0, ',', '');

		$h           = number_format(($size[1] / $size[0]) * $width, 0, ',', '');

		

		$thumbnail =  copyImage($srcFile, $destFile, $w, $h, $quality);

	}

	

	// return the thumbnail file name on sucess or blank on fail

	return basename($thumbnail);

}


/*

	Copy an image to a destination file. The destination

	image size will be $w X $h pixels

*/

function copyImage($srcFile, $destFile, $w, $h, $quality = 75)

{

    $tmpSrc     = pathinfo(strtolower($srcFile));

    $tmpDest    = pathinfo(strtolower($destFile));

    $size       = getimagesize($srcFile);


    if ($tmpDest['extension'] == "gif" || $tmpDest['extension'] == "jpg")

    {

       $destFile  = substr_replace($destFile, 'jpg', -3);

       $dest      = imagecreatetruecolor($w, $h);

       imageantialias($dest, TRUE);

    } elseif ($tmpDest['extension'] == "png") {

       $dest = imagecreatetruecolor($w, $h);

       imageantialias($dest, TRUE);

    } else {

      return false;

    }


    switch($size[2])

    {

       case 1:       //GIF

           $src = imagecreatefromgif($srcFile);

           break;

       case 2:       //JPEG

           $src = imagecreatefromjpeg($srcFile);

           break;

       case 3:       //PNG

           $src = imagecreatefrompng($srcFile);

           break;

       default:

           return false;

           break;

    }


    imagecopyresampled($dest, $src, 0, 0, 0, 0, $w, $h, $size[0], $size[1]);


    switch($size[2])

    {

       case 1:

       case 2:

           imagejpeg($dest,$destFile, $quality);

           break;

       case 3:

           imagepng($dest,$destFile);

    }

    return $destFile;


}


/*

	Create the paging links

*/

function getPagingNav($sql, $pageNum, $rowsPerPage, $queryString = '')

{

	$result  = mysql_query($sql) or die('Error, query failed. ' . mysql_error());

	$row     = mysql_fetch_array($result, MYSQL_ASSOC);

	$numrows = $row['numrows'];

	

	// how many pages we have when using paging?

	$maxPage = ceil($numrows/$rowsPerPage);

	

	$self = $_SERVER['PHP_SELF'];

	

	// creating 'previous' and 'next' link

	// plus 'first page' and 'last page' link

	

	// print 'previous' link only if we're not

	// on page one

	if ($pageNum > 1)

	{

		$page = $pageNum - 1;

		$prev = " <a href=\"$self?page=$page{$queryString}\">[Prev]</a> ";

	

		$first = " <a href=\"$self?page=1{$queryString}\">[First Page]</a> ";

	}

	else

	{

		$prev  = ' [Prev] ';       // we're on page one, don't enable 'previous' link

		$first = ' [First Page] '; // nor 'first page' link

	}

	

	// print 'next' link only if we're not

	// on the last page

	if ($pageNum < $maxPage)

	{

		$page = $pageNum + 1;

		$next = " <a href=\"$self?page=$page{$queryString}\">[Next]</a> ";

	

		$last = " <a href=\"$self?page=$maxPage{$queryString}{$queryString}\">[Last Page]</a> ";

	}

	else

	{

		$next = ' [Next] ';      // we're on the last page, don't enable 'next' link

		$last = ' [Last Page] '; // nor 'last page' link

	}

	

	// return the page navigation link

	return $first . $prev . " Showing page <strong>$pageNum</strong> of <strong>$maxPage</strong> pages " . $next . $last; 

}

?>


#2
Alexander

Alexander

    It's Science!

  • Moderators
  • 4,124 posts
  • Location:Vancouver, Eh! Cleverness: 200
Have you tried to manually verify what $_POST['txtUserName'] and the password is compared to the database?

Edited by Alexander, 08 May 2011 - 05:39 AM.
uncoloured accidental green

Be sure to read the updated FAQ! || Health is achieved through the same 10,000 steps.
If a suggested code/method fails, informing us is less important than telling us why or what errors occurred.

#3
MaD-DoC

MaD-DoC

    Newbie

  • Members
  • Pip
  • 3 posts
thank you for the reply it sloved ..
thank you ...
have nice day ...

Change function.php code
$sql = "SELECT user_id

                FROM tbl_user 

                WHERE user_name = '$userName' AND user_password = PASSWORD('$password')"; 

with this
$sql = "SELECT user_id

FROM tbl_user

WHERE user_name = '$userName'

AND user_password = '$password'";





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users