Login Help

I need help with sha1 :confused: been trying to get login to work like register works with sha1 and it will register with encryped password but the problem is that when i log in, login doesnt read through encryped password the sha1 password is the password :confused: i need it so password that people put is the actual password than the encrpyed one :frowning: HELP

=================================================

<?php ob_start(); include 'login.html'; $host="localhost"; // Host name $username="id2720802_root"; // Mysql username $password="Patch201796"; // Mysql password $db_name="id2720802_warrirorcraft"; // Database name $tbl_name="members"; // Table name // Connect to server and select databse. mysql_connect("$host", "$username", "$password")or die("cannot connect"); mysql_select_db("$db_name")or die("cannot select DB"); // Define $myusername and $mypassword $myusername = $_POST['myusername']; $mypassword = $_POST['mypassword']; // To protect MySQL injection (more detail about MySQL injection) $myusername = stripslashes($myusername); $mypassword = stripslashes($mypassword); $myusername = mysql_real_escape_string($myusername); $mypassword = mysql_real_escape_string($mypassword); $sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'"; $result=mysql_query($sql); // Mysql_num_row is counting table row $count=mysql_num_rows($result); // If result matched $myusername and $mypassword, table row must be 1 row if($count==1){ // Register $myusername, $mypassword and redirect to file "login_success.php" $_SESSION["myusername"] = $myusername; $_SESSION["mypassword"] = $mypassword; header("location:home.html"); } ob_end_flush(); ?>

This code is complete junk in every way. Toss the code and the tutorial you got it from. You need to use PDO. https://phpdelusions.net/pdo

Hi,

I assume it was not you who coded the register page, did you?

If the password is hashed and stored in db among the other details of the registered user, you may want to find a way on how to check the hash from db against the hash of the password you supply when trying to log in.

I do not think the below functions use sha1 but if you read it you may get the point:
1.)http://php.net/manual/en/function.password-hash.php
2.)http://php.net/manual/en/function.password-verify.php

Btw, perhaps you could upload the register page code as I kind of guess the above is the answer to your problem.

I agree with Kevin that the OP code is junk (and filled with obsolete mysql functions). It would be better for the OP to start over or find a more update script preferably a current tutorial on how to correctly do it.

Sponsor our Newsletter | Privacy Policy | Terms of Service