You probably forgot to use md5 on the password string before comparing it to the saved one in the database.phq wrote:Hi,
how come when I try to login my password doesn't work I have to enter
c112ca8d2922bcaac5c64b666dc0fae0 instead of my normal pass.
:Code: Select all
<?php
include 'connect.php';
?>
<table width="470" border="1">
<tr>
<center>
<th width="460" scope="col"><strong><em>Login</em></strong></th></center>
</tr>
<tr>
<th height="135" scope="row">
<form method="post" action="authenticate.php">
Username: <input type="text" name="player" size="30" maxlength="21" />
<br>
Password: <input type="password" name="password" size="30" maxlength="20"><br>
<br>
<input type="submit" value="Login">
</form>
</th>
</tr>
</table>
Code: Select all
<?php
include 'connect.php';
?>
<table width="470" border="1">
<tr>
<center>
<th width="460" scope="col"><strong><em>Registration</em></strong></th></center>
</tr>
<tr>
<th height="135" scope="row">
<form method="post" action="reguser.php">
Username:
<input type="text" name="player" size="30" maxlength="21" />
<br>
Password: <input type="password" name="password" size="30" maxlength="20"><br>
Confirm Password: <input type="password" name="pass2" size="30" maxlength="20"><br>
Email:
<input type="text" name="email" size="30" maxlength="55">
<br><br>
<input type="submit">
</form>
</th>
</tr>
</table>
HEEEELLLPPP!!!! And my database is named INSK by the way so that doesn't cause confusion Code: Select all
<form method="POST" action="authenticate.php">
User Name <input type="text" name="player" size="21">
Password <input type="password" name="password" size="21" mask="x">
<br>
<input type="submit" value="Login" name="submit">
<br><br>Not Registered? <a href='register.php'>RegisterCode: Select all
<?php
include_once 'connect.php';
session_start();
if (isset($_POST['submit']))
{
$player=$_POST['player'];
$password=$_POST['password'];
$player=strip_tags($player);
$password=strip_tags($password);
$password=md5($password);
$query = "select name,password from players where name='$player' and password='$password'";
$result = mysql_query($query) or die("Could not query players");
$result2 = mysql_fetch_array($result);
if ($result2)
{
$_SESSION['player']=$player;
echo "<big>Logged in successfully<br>";
echo "<A href='battle.php'>Continue</a></big>";
}
else
{
echo "<big>Wrong username or password.<A href='login.php'>Try Again</a></big>";
}
}
?>Code: Select all
<?php
include 'connect.php';
?>
<table width="470" border="1">
<tr>
<center>
<th width="460" scope="col"><strong><em>Registration</em></strong></th></center>
</tr>
<tr>
<th height="135" scope="row">
<form method="post" action="reguser.php">
Username:
<input type="text" name="player" size="30" maxlength="21" />
<br>
Password: <input type="password" name="password" size="30" maxlength="20"><br>
Confirm Password: <input type="password" name="pass2" size="30" maxlength="20"><br>
Email:
<input type="text" name="email" size="30" maxlength="55">
<br><br>
<input type="submit">
</form>
</th>
</tr>
</table>
Code: Select all
<?php
include 'connect.php';
?>
<?php
$player=$_POST['player'];
$password=$_POST['password'];
$pass2=$_POST['pass2'];
$player=strip_tags($player);
$email=$_POST['email'];
$email=strip_tags($email);
if ($email == "")
{
echo "You didn't enter a email address!<br>";
echo " <A href='register.php'>Go back</a>";
exit;
}
if ($password==$pass2)
{
$isplayer="SELECT * from players where name='$player'";
$isplayer2=mysql_query($isplayer) or die("Could not query players table");
$isplayer3=mysql_fetch_array($isplayer2);
if(!$_POST['password'] || !$_POST['pass2'])
{
print "You did not enter a password";
echo " <A href='register.php'>Go back</a><br>";
exit;
}
else if($isplayer3 || strlen($player)>15 || strlen($player)<1)
{
print "There is already a player of that name or the name you specified is over 16 letters or less than 1 letter<br>";
echo " <A href='register.php'>Go back</a>";
exit;
}
else
{
$isaddress="SELECT * from players where email='$email'";
$isaddress2=mysql_query($isaddress) or die("not able to query for password");
$isaddress3=mysql_fetch_array($isaddress2);
if($isaddress3)
{
print "There is already a player with that e-mail address<br>";
echo " <A href='register.php'>Go back</a>";
exit;
}
else
{
$password=md5($password);
$SQL = "INSERT into players(name, password, email, level, exper, attack, defense, hpoints) VALUES ('$player','$password','$email','1','0','5','5','30')";
mysql_query($SQL) or die("could not register");
print "Thank you for registering.";
}
}
}
else
{
print "Your password didn't match or you did not enter a password<br>";
echo " <A href='register.php'>Go back</a>";
exit;
}
echo "<br><A href='login.php'>Login Page</a>";
?>
$player=strip_tags($player);
$password=strip_tags($password);