i need php help!!!!

i made a login script and when i submit the form to login it doesnt give me any errors nether does it echo “Logged in” plz help here is the code

<?php $con = mysqli_connect('localhost','root','','prankvsprank'); if (mysqli_connect_errno()){ echo"Failed to connect_2" . mysqli_connect_error(); }else echo" Connected To Database_2"; $lUsername = @$_POST['lUsername']; $lPassword = @$_POST['lPasssword']; $lSubmit = @$_POST['lsubmit']; if($lSubmit==TRUE){ if($lUsername==TRUE){ if($lPassword==TRUE){ $login = ("SELECT * FROM prankvsprank WHERE username = '$lUsername' AND password = '$lPassword'")or die(mysqli_error_list()); $res = mysqli_query($login); $count = mysqli_num_rows($res); if($count==1){ echo" Logged in"; }else echo"Error_2"; } } } ?> Login Login
Username:
Password:

try
[php]

<?php $con = mysqli_connect('localhost','root','','prankvsprank'); if (mysqli_connect_errno()){ echo"Failed to connect_2" . mysqli_connect_error(); } else { echo" Connected To Database_2"; } $lUsername = $_POST['lUsername']; $lPassword = $_POST['lPasssword']; $lSubmit = $_POST['lsubmit']; if($_POST['submit']){ if(!empty($lUsername) && !empty($lPassword) { $login = "SELECT * FROM prankvsprank WHERE username = '$lUsername' AND password = '$lPassword'"; $res = mysqli_query($login) or die(mysqil_error()); if(mysqli_num_rows($res) != 0) {; echo "Logged in"; } else { echo "Error_2"; } } } ?> Login Login
Username:
Password:
[/php] Never suppress error messages until the script works, that's why I removed the @ from the variable assignments. I don't use mysqli, but you need to find some way to secure it against injection, maybe just use addslashes().

You could put the password and user validation on separate if statements if you want to, you need to use an error variable so the php can tell if there’s an error. something like
[php]
if($_POST[‘submit’]){
if(empty($lUsername)) {
$error[‘username’] = “Please enter a valid username”;
}
if(empty($lPassword) {
$error[‘pasword’] = “Password not recognized”;
}
if(!$error) {
$login = “SELECT * FROM prankvsprank WHERE username = ‘$lUsername’ AND password = ‘$lPassword’”;
$res = mysqli_query($login) or die(mysqil_error());
if(mysqli_num_rows($res) != 0) {;
echo “Logged in”;
} else {
echo “Error_2”;
}
}
}
?>[/php]

Sponsor our Newsletter | Privacy Policy | Terms of Service