Indie-Resource.com

Code: Select all

<?php
//
//      Authenticate
//
include_once 'connect.php';
session_start();

if (isset($_POST['submit']))
{
  $player=$_POST['player'];
  $password=$_POST['password'];
  $player=strip_tags($player);
  $password=strip_tags($password);
  $password=md5($password);
  
  $selection = "select name,password from players where name='$player' and '$password'";
  $query = mysql_query($selection) or die ("Could not query players");
  $array = mysql_fetch_array($query);
  if ($array)
  {
    $_SESSION['player']=$player;
    echo "Login successful<br>";
    echo "<A href='test.php'>YES!</a>"; // Edit this to main later, add timeout to forward.
  }
  else
  {
    echo "Login failed";
  }
}
//Login accepts random passwords, why?
?>

Code: Select all

<?php
//
//      Login
//
?>
<form method="POST" action="authenticate.php">
User Name <input type="text" name="player" size="21"><br>
Password <input tupe="text" name="password" size="21" mask="x">
<br>
<input type="submit" value="Login" name="submit">

Code: Select all

$selection = "select name,password from players where name='$player' and '$password'";

Code: Select all

$selection = "select name,password from players where name='$player' and password='$password'";