Re: Re: Password Protection

It would also be considered more correct to use curly "{ }" to open and close conditionals.. rather than ":" and end if/end else, etc.. "Erin'S Fan Club" <ixion@MailAndNews.com> wrote in message news:3B602990@MailAndNews.com... > It is more correct to use 'else' as a default error catch. It is > far better to turn it aroud like; > > <? > $result = mysql_query("SELECT password, author FROM newsauthors WHERE > author='$name' AND password='$code'"); > // If no rows are returned the user is not valid > // However if two rows are return there is also a problem! > if(mysql_num_rows($result) != 0): > { > while($result): // Loop through $result array > { > $stored_password=$result[0]; > $stored_author=$result[1]; > // Check author and pasword match > if(($stored_password == $code) && ($stored_author == $name)): > { > Print "Correct password"; // if correct > } > else: > { > Print "Authetication failed"; // if failed > } > end if; > } > end while; > } > // If no rows found in DB to match author and password > else: > { > Print "Authentication failed"; > } > end if; > > Have fun & hope this helps > > Regards EF > > >===== Original Message From "elias" <elias_bachaalany@yahoo.com> ===== > >try like that: > ><? > >$result = mysql_query("SELECT password FROM newsauthors WHERE author='$name' > >AND password='$code'"); > >if (mysql_num_rows($result) == 0) > >{ > >// sorry wrong password > >} else { // correct pwd } > > > > > >"Nintendoodle" <mark@nintendoodle.com> wrote in message > >news:002701c10ff5$bb273e80$028a7dc2@integral.dom... > >I am trying to get a content management system up and running on my site. I > >want to have the thing password protected, and this was how I was going > >about it, passing on name and password variables in the urls of the > >management system. However, this doesnt work, it just says your password in > >correct, even when it is not. > > > >Any help ? > > > ><?php > >$code = mysql_query("SELECT password FROM newsauthors WHERE $name = > >author"); > >?> > ><?php > >if ($code = $password) { > >?> > >//Content manager stuff goes here > ><? > >} else { > >echo( "You have entered an incorrect password, or you do not have access to > >this part of the Staff area. Please press back on your browser and re-enter > >details." ); > >} > >?> > > > >Thanks in advance > > > > > > > > > >-- > >PHP Windows Mailing List (http://www.php.net/) > >To unsubscribe, e-mail: php-windows-unsubscribe@lists.php.net > >For additional commands, e-mail: php-windows-help@lists.php.net > >To contact the list administrators, e-mail: php-list-admin@lists.php.net >