Re: cookie trouble
| From: | Seabird | Date: | Thu, 31 Oct 2002 14:48:32 +0000 |
| Subject: | Re: cookie trouble | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-22862@lists.php.net to get a copy of this message | ||
I got this fixed,
but how do I reverse a md5 encryption????? this way I can log people in
again.
Jacco
--
http://seabird.jmtech.ca
Attitude is Everything!
But Remember, Attitudes are Contagious!
Is Yours worth Catching????
"Seabird" <jacco@vliegt.nl> wrote in message
news:20021031165410.94762.qmail@pb1.pair.com...
> Hi everyone,
>
> I'm having some trouble configuring a cookie (first time doing this):
> I have a login-script and this sets a session cookie. What I really want
is
> to pass a cookie so that returning-people don't have to log in every time,
> but I'm not sure how to do what part is passing on the cookie (I think
> $_HTTP_SESSION_VARS=['PHP_SELF'] )
>
> How can I change this to a cookie that stores username and password for a
> time set by me (infinite).
>
> Here is my loginscript:
>
> <?php
> if(isset($_POST['submit'])) { // if form has been submitted
> /* check they filled in what they were supposed to and authenticate */
> if(!$_POST['uname'] | !$_POST['passwd']) {
> print '<form action="index.php" method="post">
> <div align="left">
> <input class="test" name="uname" type="text"
> size="8"
> maxlength="8">
> <input class="test" type="password" size="8"
> maxlength="8"
> name="passwd">
> <input name="submit" type="submit" value="Login">
> <br>
> <span class="welcome">please fill in the required
> fields.</span></div>
> </form>
> ';
> }
> // authenticate.
> if(!get_magic_quotes_gpc()) {
> $_POST['uname'] = addslashes($_POST['uname']);
> }
> $check = $db_object->query("SELECT username, password FROM users WHERE
> username = '".$_POST['uname']."'");
> if(DB::isError($check)) {
> print '<form action="index.php" method="post">
> <div align="left">
> <input class="test" name="uname" type="text"
> size="8"
> maxlength="8">
> <input class="test" type="password" size="8"
> maxlength="8"
> name="passwd">
> <input name="submit" type="submit" value="Login">
> <br>
> <span class="welcome">username doesn\'t exist.</span>
> <a
> class="header"
>
> href="javascript:loadPage(\'mainlayer\',null,\'login/signup.php\')">sign
up
> here</a></div>
> </form>
> ';
> }
> $info = $check->fetchRow();
> // check passwords match
> $_POST['passwd'] = stripslashes($_POST['passwd']);
> $info['password'] = stripslashes($info['password']);
> $_POST['passwd'] = md5($_POST['passwd']);
> if($_POST['passwd'] != $info['password']) {
> print '<form action="index.php" method="post">
> <div align="left">
> <input class="test" name="uname" type="text"
> size="8"
> maxlength="8">
> <input class="test" type="password" size="8"
> maxlength="8"
> name="passwd">
> <input name="submit" type="submit" value="Login">
> <br>
> <span class="welcome">wrong password, try
> again</span></div>
> </form>
> ';
> }
>
> // if we get here username and password are correct, register session
> variables and set
> // last login time.
> $date = date('m d, Y');
> $update_login = $db_object->query("UPDATE users SET last_login = '$date'
> WHERE username = '".$_POST['uname']."'");
> $_POST['uname'] = stripslashes($_POST['uname']);
> $_SESSION['username'] = $_POST['uname'];
> $_SESSION['password'] = $_POST['passwd'];
> $db_object->disconnect();
> ?>
> <span class="welcome">Welcome <a class="header"
>
href="javascript:loadPage('mainlayer',null,'users/edit.php?user=<?=$_SESSION
> ['username']?><?PHP print "&PHPSESSID=".session_id();
> ?>')"><font
>
> color="white"><?=$_SESSION['username']?></font></a><br><a
> class="header"
> href="login/logout.php">Logout</a>
> </span>
> <?php
> }
> else { // if form hasn't been submitted
> ?>
> <form action="<?=$HTTP_SESSION_VARS['PHP_SELF']?>"
> method="post">
> <div align="left">
> <input class="test" name="uname" type="text"
> size="8"
> maxlength="8">
> <input class="test" type="password" size="8"
> maxlength="8"
> name="passwd">
> <input name="submit" type="submit" value="Login">
> <br>
> <a class="header"
>
> href="javascript:loadPage('mainlayer',null,'login/signup.php')">sign
> up
> here</a> </div>
> </form>
> <?php
> }
> ?>
>
> Thanx,
> Jacco
>
> --
> http://seabird.jmtech.ca
>
> Attitude is Everything!
> But Remember, Attitudes are Contagious!
> Is Yours worth Catching????
>
>