This question already has an answer here:
- How to fix “Headers already sent” error in PHP 11 answers
- How can I prevent SQL injection in PHP? 28 answers
So hi guys. I need help in connecting my login page to process inputs and move to another window. I am fairly new in PHP and I have been doing this project by following some tutorials. I guess I got lost and mixed up my code. Kindly could someone like show me where I might be wrong? Thanks
<?php
include("includes/checklogin.php");
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Login Page</title>
<link rel="stylesheet" type="text/css" href="style.css">
</head>
<body>
<div class="loginbox">
<img src="images/matatu.png" class="matatu">
<form action="landing page.php" method="POST">
<p>Username</p>
<input type="text" id="username" name="username" placeholder="Enter Username">
<p>Password</p>
<input type="password" id="password" name="password" placeholder="Enter Password">
<input type="submit" name="" placeholder="Login">
<a href="#">Forgot your password?</a></form><br>
<a href="registration.php">Don't have an account?</a><br>
</div>
<div class="footer">
<p>© 2018</p>
</div>
</body>
</html>
<?php
$error=''; //Variable to Store error message;
if(isset($_POST['submit'])){
if(empty($_POST['username']) || empty($_POST['password'])){
$error = "Username or Password is Invalid";
}
else
{
//Define $user and $pass
$user=$_POST['username'];
$pass=$_POST['password'];
//Establishing Connection with server by passing server_name, user_id and pass as a parameter
$conn = mysqli_connect("localhost", "root", "Safaricom2017");
//Selecting Database
$db = mysqli_select_db($conn, "ticketing_system");
//sql query to fetch information of registerd user and finds user match.
$query = mysqli_query($conn, "SELECT * FROM admin WHERE password='$pass' AND username='$user'");
$rows = mysqli_num_rows($query);
if($rows == 1){
header("Location: landing page.php"); // Redirecting to other page
}
else
{
$error = "Username of Password is Invalid";
}
mysqli_close($conn); // Closing connection
}
}
?>
</div>
