I'm having issues with a simple login using php and mysql.
Here is my code:
LOGIN.PHP
<?php
//include 'core/init.php';
include 'functions.php';
//JH check if user is logged in already
if (loggedin()) {
header("location: userarea.php");
exit();
}
if ($_POST['login']) {
$user = $_POST['user'];
$pass = $_POST['pass'];
$remember = $_POST['remember'];
$password_encrip = hash('md5', $pass);
if ($user&&$pass) {
$login = mysql_query("SELECT * FROM users WHERE user='$user'");
while ($row = mysql_fetch_assoc($login))
$db_pass = $row['pass']; {
if ($password_encrip==$db_pass)
$login_ok = TRUE;
else
$login_ok = FALSE;
}
if ($login_ok==TRUE) {
if ($remember=="on")
setcookie("user", $user, time()+7200);
else if ($remember=="")
$_SESSION['user']=$user;
header("Location: userarea.php");
exit();
} else
echo "ERROR: Username/Password combination incorrect!";
} else
die("ERROR: Hit back and enter username and password!");
}
?>
<form action="login.php" method="POST">
<b style="font-size:150%;">Log in</b><br/>
Username: <input type="text" name="user"/><br/>
Password: <input type="password" name="pass"/><br/>
<input type="checkbox" name="remember" />Remember me<br/>
<input type="submit" name="login" value="Log in"/>
</form>
FUNCTIONS.PHP
<?php
// REPORT ERRORS?
//error_reporting(E_ALL);
// SESSIONS CHECK
session_start();
//CONNECT TO DATABASE/CONNECT
mysql_connect("localhost","MYSQL","PASS") or die();
mysql_select_db('DB') or die();
// LOGIN CHECK FUNCTION
function loggedin()
{
if (isset($_SESSION['$user']) || isset($_COOKIE['$user']))
{
$loggedin = TRUE;
return $loggedin;
}
}
?>
USERAREA.PHP
<?php
//include 'core/init.php';
include 'functions.php';
//JH check if user is logged in already
if (!loggedin())
{
header("location: login.php");
exit();
}
?>
<p>Welcome! You're Logged in</p> <a href="logout.php">Logout</a><br/>
<?php
echo "Welcome SESS: ".$_SESSION['user']. "<br/>";
echo "Welcome Cookie: ".$_COOKIE['user']. "<br/>";
?>
Can anyone please help?
