phpBB login (latest version)

Associate
Joined
4 Mar 2007
Posts
315
Location
United Kingdom
ok so I've been trying to make an external log in for my website (just testing around with php) and I've come across this problem.
If i log in using the database MD5 hash the log in works a charm, however if I used my own REAL password it returns false, could anyone possibly lend a hand here =/

PHP:
<?php
$host="localhost"; // Host name 
$username="x"; // Mysql username 
$password="x"; // Mysql password 
$db_name="x"; // Database name 
$tbl_name="x"; // Table name 

// Connect to server and select databse.
mysql_connect("$host", "$username", "$password")or die("cannot connect"); 
mysql_select_db("$db_name")or die("cannot select DB");

// username and password sent from form 
$myusername=$_POST['myusername']; 
$mypassword=$_POST['mypassword']; 

// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);
$mypassword = ($mypassword);

$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and user_password ='$mypassword'";
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
session_register("myusername");
session_register("mypassword"); 
header("location:user.php");
}
else {
echo "Wrong Username or Password";
}
?>
 
You need to MD5 the password for it to work. How about this:

PHP:
$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and user_password =MD5('$mypassword')";
 
Back
Top Bottom