Show DevBest Login page [PHP]

Status
Not open for further replies.
Sisija

Sisija

New Member
Sep 23, 2010
27
0
What you need is

Xampp
And a mind >:)


Copy and paste this


PHP: 
<?php session_start(); ?>
<html>
<head/>
<body>
<form action='index.php?login=yes' method=post>
Username: <input type=text name='user'><br/>
password: <input type=password name='pass'><br/>
<input type=submit value='go!'>
<form>

<?php

    $user=$_POST['user'];
    $pass=$_POST['pass'];
    $login=$_GET['login']'
 
   if ($login=='yes'){
           $con=mysql_connect('5.50.230.66,'site',
           mysql_select_db(''login'')

          $get=mysql_query('SELECT count(id) FROM login WHERE user='$user' and pass='$pass'');
          $result=mysql_result($get, 0);

          mysql_close($con);

         if ($result!=1) echo ''login failure!'';
         else{
               echo ''login succsess!''
                $_SESSION['user']=$user;
         };
    };
?>

</body>
 
Kryptos

Kryptos

prjRev.com
Jul 21, 2010
2,205
1,252
Very nice, did you make this?
Also, I see an error in the <head/> shouldn't it be <head> instead of <head/>?
 
Nick

Nick

New Member
Sep 24, 2010
14
0
id be pretty facinated to see how this works....

PHP: 
$con=mysql_connect('5.50.230.66,'site', 
           mysql_select_db(''login'')
Quite a cupple of errors here ... let me help you with that :)

Security Issue
PHP: 
$user=$_POST['user']; 
$pass=$_POST['pass'];

Fix
PHP: 
$user=strip_tags(mysql_escape_string($_POST['user'])); 
$pass=strip_tags(mysql_escape_string($_POST['pass']));
Simple Fixs...
PHP: 
mysql_select_db("login", $con);
Iv decided id be here all night editing that... soo here is a clean copy :)
PHP: 
<?php
session_start();
class DBLink {
    
    ## MySQL CLASS
    var $link;
    
    function Connect() {
        $this->link = mysql_connect("localhost", "root", "");
        if(mysql_error($this->link)) {
            echo mysql_errno();
        } else {
            mysql_select_db("Nick", $this->link);
        }
    }
    
}
$DBLink = new DBLink;

#####################################

$DBLink->Connect();
$req = $_GET['req'];
switch($req) {
    case "login":
        $username = strip_tags(mysql_escape_string($_POST['username']));
        $password = strip_tags(mysql_escape_string(md5($_POST['password'])));
        
        // Step 1...
        $sql_1 = mysql_query("SELECT * FROM users WHERE username = '$username' AND password = '$password'");
        if(mysql_num_rows($sql_1) <= 0) {
            header("Location: index.php?error=1");
        } else {
            $_SESSION['username'] = $username;
            $_SESSION['password'] = $password;
            $sql_2 = mysql_query("SELECT * FROM users WHERE username = '$_SESSION[username]' AND password = '$_SESSION[password]'");
            if(mysql_num_rows($sql_2) <= 0) {
                session_destroy();
                header("Location: index.php?error=2");
            } else {
                echo("Logging in...");
                header("Refresh: 2;cp.php");
            }
        }
    break;
?>
 
RastaLulz

RastaLulz

fight teh power
Staff member
May 3, 2010
3,926
3,921
Eh, this is a pretty useless tutorial as it explains nothing, and is simply a copy and paste. It's also missing a database, etc.
 
R

Roper

Ancient Member
Jul 4, 2010
569
216
There are many errors within this, which is why it shouldn't be used.
 
Benden

Benden

maging ang maganda mamatay
Jun 4, 2010
2,281
1,480
Why bring back an old thread and so i dont get a warning its a nice try fix the security issues and repost
 
Mastah

Mastah

the funny thing is \r\n i did
Oct 25, 2010
739
41
jonty can you stop flaming on others work he did his best

[MOD] Thread closed - flaming will lead to spam [/MOD]
 
Status
Not open for further replies.

Users who are viewing this thread

Total: 2 (members: 0, guests: 2)
☀️  Switch to Light Theme

Latest posts

Top