PHP login form processing

Asked Jun 19 '14 at 15:03

Active Jun 19 '14 at 15:06

Viewed 13 times

I am trying to create a simple user login. I have the form set up on another page and I am posting the data to the following page. I know there's no security etc at the moment, I will add that later I am simply just trying to get the whole process to work for now.

Currently, when I submit the form, it takes me to the login.php page which the code for is below but gives me the WSOD! Can anyone point me in the right direction please? Thanks.

<?php
$con=mysqli_connect("localhost","tkernick96","Tylerkernick1996","users");

if (mysqli_connect_errno())
{
echo "Failed to connect to MySQL: " . mysqli_connect_error();
}



$query = mysqli_query($con,"SELECT * FROM users WHERE 'email' = '$_POST[email]' AND 'password' = '$_POST[password]'");
$count = mysqli_num_rows($query);

if($count == 0) {
    $output = '<p>Sorry, the information entered was not correct.</p>';
    }

else {
    $row = mysqli_fetch_array($query,MYSQLI_ASSOC);
        $name = $row ['firstname'];
        $acclink = $row ['link'];


    session_start();
        $_SESSION['id']=$_POST['email'];
        $_SESSION['name']=$name;
        $_SESSION['link']=$acclink;

        header('location: index.php');

}

?>

edited Jun 19 '14 at 15:06

Funk Forty Niner

74,372
15
66
132

asked Jun 19 '14 at 15:03

user3439743

1

Your WHERE clause, remove the quotes around the column names. – Funk Forty Niner Jun 19 '14 at 15:05
Add error reporting to the top of your file(s) `error_reporting(E_ALL); ini_set('display_errors', 1);` – Funk Forty Niner Jun 19 '14 at 15:05
@JohnConde *Blowing on fingers* ;-) – Funk Forty Niner Jun 19 '14 at 15:06
And you never use the variable $output anywhere. – hank Jun 19 '14 at 15:06
1

Your present code is open to [**SQL injection**](http://stackoverflow.com/q/60174/). Use [**prepared statements**](http://www.php.net/manual/en/mysqli.quickstart.prepared-statements.php), or [**PDO**](http://php.net/pdo) with [**prepared statements**](http://php.net/pdo.prepared-statements). – Funk Forty Niner Jun 19 '14 at 15:07
1

Thanks @Fred-ii- working fine now. – user3439743 Jun 19 '14 at 15:08
You're very much welcome. – Funk Forty Niner Jun 19 '14 at 15:08

PHP login form processing

0 Answers0