PHP connection problem, I can't get success with loging in though I think I use corect login and password...

Collapse
This topic is closed.
X
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • MIUSS
    #1

    PHP connection problem, I can't get success with loging in though I think I use corect login and password...

    Hi

    need an advice, I'm beginner with PHP. I got little problem:

    I use this solution as login to get administration of my pages:

    <?php
    // if authorization isn't done we request it
    if (!IsSet($PHP_AU TH_USER))
    {
    Header("HTTP/1.0 401 Unauthorized");
    Header("WWW-Authenticate: Basic realm=\"RS - Admin Center\"");
    echo "Unauthoriz ed access (a)";
    exit;
    }
    // if user filled up the form we continue with checking data in
    database
    else
    {
    // connect to database
    include "../conn.php";
    // looking for the login and password records that are set in
    authorizing form
    // we off-course looking for active users only
    $sql = mysql_query("SE LECT * FROM autori
    WHERE login LIKE '$PHP_AUTH_USER '
    AND pass = '".md5($PHP_AUT H_PW)."'
    AND stav = 'a'");
    // if we won't find anyone with requested conditions we stop
    if (mysql_num_rows ($sql) == 0)
    {
    Header("HTTP/1.0 401 Unauthorized");
    Header("WWW-Authenticate: Basic realm=\"RS - Admin Center\"");
    echo "Unauthoriz ed access (b)";
    mysql_close($co nn);
    exit;
    }
    // we don't need the connection with database so we end
    mysql_close($co nn);
    }
    // continue with opening frames
    ?>

    The problem is that I can not get success with login on my pages
    though I use correct login and password. The dialog is opened three
    times and then I get the message Unauthorized access (a). It seems
    that the part after else command is never done. Why is it?

    Thank you very much for your hints!

    Have a nice day!

    Tags: None
    • shimmyshack
      #2
      Re: PHP connection problem, I can't get success with loging in though I think I use corect login and password...

      On Apr 26, 10:07 pm, MIUSS <m...@seznam.cz wrote:
      Hi
      >
      need an advice, I'm beginner with PHP. I got little problem:
      >
      I use this solution as login to get administration of my pages:
      >
      <?php
      // if authorization isn't done we request it
      if (!IsSet($PHP_AU TH_USER))
      {
      Header("HTTP/1.0 401 Unauthorized");
      Header("WWW-Authenticate: Basic realm=\"RS - Admin Center\"");
      echo "Unauthoriz ed access (a)";
      exit;}
      >
      // if user filled up the form we continue with checking data in
      database
      else
      {
      // connect to database
      include "../conn.php";
      // looking for the login and password records that are set in
      authorizing form
      // we off-course looking for active users only
      $sql = mysql_query("SE LECT * FROM autori
      WHERE login LIKE '$PHP_AUTH_USER '
      AND pass = '".md5($PHP_AUT H_PW)."'
      AND stav = 'a'");
      // if we won't find anyone with requested conditions we stop
      if (mysql_num_rows ($sql) == 0)
      {
      Header("HTTP/1.0 401 Unauthorized");
      Header("WWW-Authenticate: Basic realm=\"RS - Admin Center\"");
      echo "Unauthoriz ed access (b)";
      mysql_close($co nn);
      exit;
      }
      // we don't need the connection with database so we end
      mysql_close($co nn);}
      >
      // continue with opening frames
      ?>
      >
      The problem is that I can not get success with login on my pages
      though I use correct login and password. The dialog is opened three
      times and then I get the message Unauthorized access (a). It seems
      that the part after else command is never done. Why is it?
      >
      Thank you very much for your hints!
      >
      Have a nice day!
      you are using an old script, use
      $_SERVER['PHP_AUTH_PW']
      $_SERVER['PHP_AUTH_USER']
      and adjust your query to
      ....
      WHERE login LIKE '".$_SERVER['PHP_AUTH_USER']."'
      ...
      to avoid issue with quotes now, and it should be fine.

        Comment

        • MIUSS
          #3
          Re: PHP connection problem, I can't get success with loging in though I think I use corect login and password...


          Hi!

          I'm little confused, I tried more things but I still didn't get
          success.

          I think this should be corect:

          $sql = mysql_query("SE LECT * FROM autori
          WHERE login LIKE \"".
          $_SERVER['PHP_AUTH_USER']."\"
          AND pass LIKE
          \"".md5($_SERVE R['PHP_AUTH_PW'])."\"
          AND stav LIKE a\";");

          But it isn't and it does not work:-(

            Comment

            • shimmyshack
              #4
              Re: PHP connection problem, I can't get success with loging in though I think I use corect login and password...

              On Apr 27, 7:13 pm, MIUSS <m...@seznam.cz wrote:
              Hi!
              >
              I'm little confused, I tried more things but I still didn't get
              success.
              >
              I think this should be corect:
              >
              $sql = mysql_query("SE LECT * FROM autori
              WHERE login LIKE \"".
              $_SERVER['PHP_AUTH_USER']."\"
              AND pass LIKE
              \"".md5($_SERVE R['PHP_AUTH_PW'])."\"
              AND stav LIKE a\";");
              >
              But it isn't and it does not work:-(
              dont use LIKE, instead use = and your query should be better formed,
              go check out how to authenticate with mysql, and look for the query
              used, and follow the example,
              $query = sprintf( "SELECT.... .. WHERE `login` = '%s' ......",
              $_SERVER['PHP_AUTH_USER'] [,......] );
              etc.... google for this rather than just trying stuff, else you will
              get it wrong.

                Comment

                Previous template Next
                Working...