White screen after login Website

hello guys this is my website www.mehislop.com.
i have a small problem people can register well and without any problems
but after login the screen just goes white
but the funny thing is after login you can go to www.mehislop.com/member_profile.php

but it isnt redirecting

this is the code i used for it

[php]<?php

if ($_POST[‘email’]) {
//Connect to the database through our include
include_once “connect_to_mysql.php”;
$email = stripslashes($_POST[‘email’]);
$email = strip_tags($email);
$email = mysql_real_escape_string($email);
$password = ereg_replace("[^A-Za-z0-9]", “”, $_POST[‘password’]); // filter everything but numbers and letters
$password = md5($password);
// Make query and then register all database data that -
// cannot be changed by member into SESSION variables.
// Data that you want member to be able to change -
// should never be set into a SESSION variable.
$sql = mysql_query(“SELECT * FROM members WHERE email=’$email’ AND password=’$password’ AND emailactivated=‘1’”);
$login_check = mysql_num_rows($sql);
if($login_check > 0){
while($row = mysql_fetch_array($sql)){
// Get member ID into a session variable
$id = $row[“id”];
session_register(‘id’);
$_SESSION[‘id’] = $id;
// Get member username into a session variable
$username = $row[“username”];
session_register(‘username’);
$_SESSION[‘username’] = $username;
// Update last_log_date field for this member now
mysql_query(“UPDATE members SET lastlogin=now() WHERE id=’$id’”);
// Print success message here if all went well then exit the script
header(“location: member_profile.php?id=$id”);
exit();
} // close while
} else {
// Print login failure message to the user and link them back to your login page
print ‘

No match in our records, try again


Click here to go back to the login page.’;
exit();
}
}// close if post
?>[/php]

Why do you filter everything but characters/numbers from the password? And storing passwords as MD5 is not considered safe, if this is live then please change to an hash routine suited for password storage.

Change almost everything. session_register(), ereg_replace(), mysql_().

Sponsor our Newsletter | Privacy Policy | Terms of Service