|
|
Posted by Schraalhans Keukenmeester on 05/20/07 15:13
At Sun, 20 May 2007 07:47:36 -0700, Johannes let his monkeys type:
> On 20 mei, 16:35, Jerry Stuckle <jstuck...@attglobal.net> wrote:
>> Johannes wrote:
>> > Hey guys,
>>
>> > I'm building a login script using an active or inactive state, but
>> > when i check for this state it just simply skips to the incorrect
>> > login. It looks like the If ... AND ... part isn't working. Can
>> > anybody give me a hand with this problem?
>>
>> > here's the code I use:
>>
>> > <?php
>> > include("connect.php");
>> > session_start();
>>
>> > if (!empty($_POST)){
>> > $query = "SELECT * FROM KLANT
>> > WHERE Email='".$_POST["Email"]."'
>> > AND Wachtwoord='".$_POST["Wachtwoord"]." ' ";
>> > $result=mysql_query($query) or die("FOUT : " . MySQL_error());
>>
>> > if ((Status=="actief") AND (MySQL_num_rows($result) >0)){
>> > $username=$_POST["Email"];
>> > $wachtwoord=$_POST["Wachtwoord"];
>> > session_register("username");
>> > session_register("wachtwoord");
>> > mysql_fetch_row($result);
>> > header("Location: winkel.php");
>> > exit();
>> > }
>> > elseif ((Status=="inactief") AND (MySQL_num_rows($result) >0)){
>> > $tekst="Uw account staat momenteel op niet-actief<br>
>> > Neem a.u.b. contact op met de winkel";
>> > die($tekst);
>> > }else{
>> > $tekst="U hebt geen geldige combinatie van e-mailadres en
>> > wachtwoord opgegeven. Maak een keuze: <br>
>> > <a href=\ 'inloggen.php\'>Opnieuw inloggen</a><br>
>> > <a href=\ 'aanmelden.php\'>Hier registreren</a><br>";
>> > die($tekst);
>> > }}
>> > ?>
>>
>> Where are you getting Status? Are you depending on register_globals to
>> be set on? If so, this is a "very bad thing".
>>
>> Also, session_register is similar in that it requires register_globals
>> to be on.
>>
>> Rather, you should be using the $_SESSION array.
>>
>
>>
>> - Tekst uit oorspronkelijk bericht weergeven -
>
> Status is a textfield in a table in a database. The connection to this
> database is made in connect.php. I changed the register_globals to
> $_SESSION, but it didn't fix the AND problem i`m afraid..
So, where do you fetch the status from the db? Also in connect.php? If so:
Do both scripts begin with session_start()? Where is $_SESSION['status']
assigned to $status?
If not, (where) is it ($status) set in the script you posted?
Sh.
Navigation:
[Reply to this message]
|