checklogin.php si mysql

[TruffleX]

Salut, am si eu o problema in legatura cu checklogin.php . Am un script gen concurs online care are si o baza de date mysql, merge sa iti faci cont dar nu iti recunoaste username si password din baza de date

Code: Select all

<?php

// Conectare MySQL
require ('config.php');
// -------------------

// Variabile

if(!isset($_POST['username'])){ 
    $username = "????";
} else { 
    $username = $_POST['username'];
} 

if(!isset($_POST['password'])){ 
    $password = "????"; 
} else { 
    $password = $_POST['password'];
}

// -------------------

// Verificam daca userul exista in DB !


$verificare_username = ("SELECT username FROM users WHERE username = '$username' AND password = '$password'");

$result_username = mysql_query($verificare_username);

if( mysql_num_rows($result_username) == 0 ) { // Verificare cont
echo "<br>";
echo "Userul sau parola sunt incorecte !";
echo "<br>";
} else {

print("<table>");
$stats = mysql_query("SELECT * FROM users WHERE username = '$username' AND password = '$password'");
while($row = mysql_fetch_array($stats))
  {
 
 $username = $row['username'];
 $email = $row['email'];
 $pass = $row['password'];
 $fragi = $row['frags'];
 $premiu = $row['premiu'];
 print("<tr><td class='rules'><font size='1'>Username: $username </td></tr><tr><td class='rules'><font size='1'>Parola: $pass </td></tr><tr><td class='rules'><font size='1'>Email: $email </td></tr><tr><td class='rules'><font size='1'>Frags: $fragi </td></tr><tr><td class='rules'><font size='1'>Premiu: $premiu </td></tr>
 <tr><td class='rules'><br><br>Link-ul tau: <input name='link' type='text' size='65' value='http://$siteurl/link.php?player=$username'/></td></tr>");

}
 print("</table>");
 }
?>

am pus tot ce apartine de mysql poate este gresit ceva la el...

[piticanie]

Schimba

Code: Select all

("SELECT username FROM users WHERE username = '$username' AND password = '$password'")

in

Code: Select all

("SELECT * FROM users WHERE username ='". $username ."')

peste tot .

[TruffleX]

nu merge man nici asa
am incercat toate posibilitatile. eu spuneam daca o merge sa blochez verificarea username si password si sa o fac sa verifice emailu