Reply to thread

Message

<blockquote data-quote="Alam" data-source="post: 73394" data-attributes="member: 4147">Hello,Here is a basic &amp; simple PHP script wrote from scratch on my own.&nbsp;The system includes :<ul>
<li data-xf-list-type="ul">Login page</li>
<li data-xf-list-type="ul">Config page</li>
<li data-xf-list-type="ul">Registration page</li>
<li data-xf-list-type="ul">Md5 encryption</li>
<li data-xf-list-type="ul">Members page</li>
<li data-xf-list-type="ul">Logout page</li>
<li data-xf-list-type="ul">account page (change username &amp; password)</li>
<li data-xf-list-type="ul">Simple database structure.</li>
</ul>--Config page :&nbsp;[PHP]&lt;?php&nbsp;$dbhost = &quot;localhost&quot;;$dbuser = &quot;root&quot;;$dbpass = &quot;&quot;;$dbname = &quot;php&quot;;&nbsp;&nbsp;mysql_connect($dbhost,$dbuser,$dbpass);mysql_select_db($dbname);&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;?&gt;[/PHP]&nbsp;Index/Login page :&nbsp;[PHP]&lt;?phpsession_start();&nbsp;include 'config.php';&nbsp;$username = mysql_real_escape_string($_POST['username']);$password = $_POST['password'];&nbsp;if(isset($_POST['submit'])){if(!empty($username)&amp;&amp;!empty($password)){&nbsp; &nbsp; $query = mysql_query(&quot;SELECT * FROM users WHERE username='$username'&quot;);&nbsp; &nbsp; $id1 = mysql_query(&quot;SELECT id FROM users WHERE username='$username'&quot;);&nbsp; &nbsp; $numrows = mysql_num_rows($query);&nbsp;&nbsp; &nbsp; while ($row = mysql_fetch_array($id1))&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; $id = $row['id'];&nbsp; &nbsp; }&nbsp;&nbsp;&nbsp; &nbsp; if($numrows!=0)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; while ($row = mysql_fetch_assoc($query))&nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $user = $row['username'];&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $pass = $row['password'];&nbsp; &nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; if($username==$user&amp;&amp;md5($password)==$pass)&nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $_SESSION['user']=$username;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $_SESSION['user_id']=$id;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; header(&quot;location: me.php&quot;);&nbsp;&nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; echo &quot;Your password is incorrect, please try again.&quot;;&nbsp;&nbsp; &nbsp; }&nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; echo &quot;The user $username does not exist&quot;;&nbsp;}else&nbsp; echo &quot;Please enter your username and password.&quot;;&nbsp;}&nbsp;if($_SESSION['user']){&nbsp; header(&quot;location: me.php&quot;);}else{echo &quot;&lt;html&gt;&nbsp; &nbsp; &lt;head&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;title&gt;Login page&lt;/title&gt;&nbsp; &nbsp; &lt;/head&gt;&nbsp;&nbsp; &nbsp; &lt;body&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;form action='index.php' method='POST'&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Username : &lt;input type='text' name='username'&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Password : &lt;input type='password' name='password'&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;input type='submit' name='submit' value='Login'&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;/form&gt;&nbsp;&nbsp; &nbsp; &lt;/body&gt;&lt;/html&gt;&quot;;&nbsp;?&gt;[/PHP]&nbsp;Registration Page :[PHP]&lt;?phpinclude 'config.php';&nbsp;$username = strip_tags($_POST['username']);$email = strip_tags($_POST['email']);$password = strip_tags($_POST['password']);$repeatpassword = strip_tags($_POST['repeatpassword']);&nbsp;&nbsp;if (isset($_POST['submit'])) {&nbsp;&nbsp;&nbsp; &nbsp; if ($username &amp;&amp; $email &amp;&amp; $password &amp;&amp; $repeatpassword) {&nbsp; &nbsp; &nbsp; &nbsp; if ($password == $repeatpassword) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (strlen($username) &gt; 30) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo &quot;Your username can't be longer than 30 characters.&quot;;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } else {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (strlen($email) &lt; 6) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo &quot;This email is invalid.&quot;;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } else {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if (strlen($password) &gt; 35 || strlen($password) &lt; 6) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo &quot;Your password must be between 6 and 35 characters.&quot;;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } else {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $ch = mysql_query(&quot;SELECT username FROM users WHERE username='$username'&quot;);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $check = mysql_num_rows($ch);&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if ($check != 0) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo &quot;The username $username already exists.&quot;;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; } else {&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $hashpassword = md5($password);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $insert = &quot;INSERT INTO users (username,email,password) VALUES ('$username','$email','$hashpassword')&quot;;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mysql_query($insert);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $_SESSION['user']=$username;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $_SESSION['user_id']=$id;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; header(&quot;location: me.php&quot;);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo &quot;Password does not match&quot;;&nbsp; &nbsp; }&nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; echo &quot;Please fill in all the fields&quot;;&nbsp;&nbsp; &nbsp; }&nbsp;&nbsp;?&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;html&gt;&nbsp; &nbsp; &lt;head&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;title&gt;Register page&lt;/title&gt;&nbsp; &nbsp; &lt;/head&gt;&nbsp;&nbsp; &nbsp; &lt;body&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;form action=&quot;register.php&quot; method=&quot;POST&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Username&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;input type=&quot;text&quot; name=&quot;username&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Email&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;input type=&quot;text&quot; name=&quot;email&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Password&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;input type=&quot;password&quot; name=&quot;password&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Repeat password&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;input type=&quot;password&quot; name=&quot;repeatpassword&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;input type=&quot;submit&quot; name=&quot;submit&quot; value=&quot;Create account&quot;&gt;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &lt;/form&gt;&nbsp;&nbsp; &nbsp; &lt;/body&gt;&nbsp;&nbsp;&lt;/html&gt;[/PHP]&nbsp;Me.php page :[PHP]&lt;?phpsession_start();&nbsp;if($_SESSION['user']){&nbsp; echo &quot;&lt;a href='me.php'&gt;&quot;. $_SESSION['user'] .&quot;&lt;/a&gt; |&quot;;&nbsp; echo &quot; &lt;a href='account.php'&gt;My account &lt;/a&gt; |&lt;a href='logout.php'&gt;Logout&lt;/a&gt;&quot;;}else&nbsp; echo &quot;You must be logged in to view this page.&quot;;&nbsp;?&gt;[/PHP]&nbsp;Logout page :[PHP]&lt;?php&nbsp;session_start();&nbsp;session_destroy();&nbsp;header(&quot;location: index.php&quot;);&nbsp;?&gt;[/PHP]&nbsp;Account page :[PHP]&lt;?php&nbsp;session_start();&nbsp;&nbsp; &nbsp; $username = strip_tags($_POST['username']);&nbsp; &nbsp; $cpassword = $_POST['cpassword'];&nbsp; &nbsp; $npassword = $_POST['npassword'];&nbsp; &nbsp; mysql_connect(&quot;localhost&quot;, &quot;root&quot;, &quot;&quot;);&nbsp; &nbsp; mysql_select_db(&quot;php&quot;);&nbsp; &nbsp; $update = &quot;UPDATE users SET username = '$username' WHERE id = '&quot;. $_SESSION['user_id'] .&quot;'&quot;;&nbsp; &nbsp; $check = mysql_query(&quot;SELECT username FROM users WHERE username='$username'&quot;);&nbsp; &nbsp; $pwcheck = mysql_query(&quot;SELECT password FROM users WHERE username='$username'&quot;);&nbsp; &nbsp; $numrows = mysql_num_rows($check);&nbsp;if (isset($_POST['eu'])) {&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; if ($username) {&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; if ($numrows!=0)&nbsp;&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; echo &quot;This username already exists!&quot;;&nbsp; &nbsp; }&nbsp; &nbsp; else&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mysql_query($update);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; session_start();&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; session_destroy();&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; header(&quot;location: logout.php&quot;);&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; }&nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; echo &quot;Please enter a username&quot;;&nbsp;}else{&nbsp; &nbsp; if(isset($_POST['ue']))&nbsp;&nbsp; &nbsp; {&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; if ($cpassword&amp;&amp;$npassword)&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp;while($row = mysql_fetch_assoc($pwcheck)){&nbsp; &nbsp; $dbpass = $row['password'];}&nbsp;$hcpassword = md5($cpassword);$hnpassword = md5($npassword);&nbsp;if ($hcpassword==$dbpass){&nbsp; &nbsp; if (strlen($npassword)&gt;35 || strlen($npassword)&lt;6)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; echo &quot;Your password must be between 6 and 25 characters.&quot;;&nbsp; &nbsp; }&nbsp; &nbsp; else&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; $updatepass = &quot;UPDATE users SET password = '$hnpassword' WHERE id='&quot;. $_SESSION['user_id'] .&quot;'&quot;;&nbsp; &nbsp; &nbsp; &nbsp; mysql_query($updatepass);&nbsp; &nbsp; &nbsp; &nbsp; echo &quot;Your password has been changed.&quot;;&nbsp; &nbsp; }}else{&nbsp; echo &quot;This is not your current password.&quot;;}&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo &quot;Please field in both fields.&quot;;&nbsp;&nbsp; &nbsp; }}&nbsp;if (!$_SESSION['user_id']) {&nbsp; &nbsp; echo &quot;you must be logged in to view this page&quot;;} else {&nbsp; &nbsp; echo &quot;&lt;head&gt;&nbsp; &nbsp; &nbsp; &lt;title&gt;My account&lt;/title&gt;&nbsp; &nbsp; &lt;/head&gt;&nbsp;&nbsp; &nbsp; &lt;body&gt;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &lt;form action='account.php' method='POST'&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;h1&gt;Username&lt;/h1&gt; &lt;a href='me.php'&gt;Go back&lt;/a&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Edit username &lt;br /&gt; &lt;input type='text' name='username'&gt;&nbsp; &lt;input type='submit' name='eu' value='Update account'&gt;&lt;/form&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/form&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;form action='account.php' method='POST'&gt;&lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;h1&gt;Change password&lt;/h1&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;input type=\&quot;hidden\&quot; name=\&quot;username\&quot; value=\&quot;&quot;. $_SESSION['user'] .&quot;\&quot; /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Current password &lt;br/&gt; &lt;input type='password' name='cpassword'&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; New password&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;input type='password' name='npassword'&gt; &lt;input type='submit' name='ue' value='Submit'&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;/form&gt;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &lt;/body&gt;&nbsp; &nbsp; &quot;;}[/PHP]&nbsp;Here is the database structure :<a href="http://sharefast.net/view/WNowEvkQik8z" target="_blank">http://sharefa.st/view/WNowEvkQik8z</a>&nbsp;&nbsp;--Hope you like it <img src="/styles/default/xenforo/smilies/emojione/smile.png"&nbsp; class="smilie" loading="lazy" alt=":)" title="Smile&nbsp; &nbsp; :)" data-shortname=":)" />Any question about this script , please contact me.&nbsp;Added the config.php page for easier database configuration.</blockquote>

[QUOTE="Alam, post: 73394, member: 4147"] Hello, Here is a basic & simple PHP script wrote from scratch on my own. The system includes : [LIST] [*]Login page [*]Config page [*]Registration page [*]Md5 encryption [*]Members page [*]Logout page [*]account page (change username & password) [*]Simple database structure. [/LIST] -- Config page : [PHP]<?php $dbhost = "localhost"; $dbuser = "root"; $dbpass = ""; $dbname = "php"; mysql_connect($dbhost,$dbuser,$dbpass); mysql_select_db($dbname); ?>[/PHP] Index/Login page : [PHP]<?php session_start(); include 'config.php'; $username = mysql_real_escape_string($_POST['username']); $password = $_POST['password']; if(isset($_POST['submit'])) { if(!empty($username)&&!empty($password)) { $query = mysql_query("SELECT * FROM users WHERE username='$username'"); $id1 = mysql_query("SELECT id FROM users WHERE username='$username'"); $numrows = mysql_num_rows($query); while ($row = mysql_fetch_array($id1)) { $id = $row['id']; } if($numrows!=0) { while ($row = mysql_fetch_assoc($query)) { $user = $row['username']; $pass = $row['password']; } if($username==$user&&md5($password)==$pass) { $_SESSION['user']=$username; $_SESSION['user_id']=$id; header("location: me.php"); } else echo "Your password is incorrect, please try again."; } else echo "The user $username does not exist"; } else echo "Please enter your username and password."; } if($_SESSION['user']) { header("location: me.php"); } else { echo "<html> <head> <title>Login page</title> </head> <body> <form action='index.php' method='POST'> Username : <input type='text' name='username'> Password : <input type='password' name='password'> <input type='submit' name='submit' value='Login'> </form> </body> </html>"; ?> [/PHP] Registration Page : [PHP] <?php include 'config.php'; $username = strip_tags($_POST['username']); $email = strip_tags($_POST['email']); $password = strip_tags($_POST['password']); $repeatpassword = strip_tags($_POST['repeatpassword']); if (isset($_POST['submit'])) { if ($username && $email && $password && $repeatpassword) { if ($password == $repeatpassword) { if (strlen($username) > 30) { echo "Your username can't be longer than 30 characters."; } else { if (strlen($email) < 6) { echo "This email is invalid."; } else { if (strlen($password) > 35 || strlen($password) < 6) { echo "Your password must be between 6 and 35 characters."; } else { $ch = mysql_query("SELECT username FROM users WHERE username='$username'"); $check = mysql_num_rows($ch); if ($check != 0) { echo "The username $username already exists."; } else { $hashpassword = md5($password); $insert = "INSERT INTO users (username,email,password) VALUES ('$username','$email','$hashpassword')"; mysql_query($insert); $_SESSION['user']=$username; $_SESSION['user_id']=$id; header("location: me.php"); } } } } } else echo "Password does not match"; } else echo "Please fill in all the fields"; } ?> <html> <head> <title>Register page</title> </head> <body> <form action="register.php" method="POST"> Username <input type="text" name="username"> Email <input type="text" name="email"> Password <input type="password" name="password"> Repeat password <input type="password" name="repeatpassword"> <input type="submit" name="submit" value="Create account"> </form> </body> </html>[/PHP] Me.php page : [PHP]<?php session_start(); if($_SESSION['user']) { echo "<a href='me.php'>". $_SESSION['user'] ."</a> |"; echo " <a href='account.php'>My account </a> |<a href='logout.php'>Logout</a>"; } else echo "You must be logged in to view this page."; ?>[/PHP] Logout page : [PHP]<?php session_start(); session_destroy(); header("location: index.php"); ?>[/PHP] Account page : [PHP] <?php session_start(); $username = strip_tags($_POST['username']); $cpassword = $_POST['cpassword']; $npassword = $_POST['npassword']; mysql_connect("localhost", "root", ""); mysql_select_db("php"); $update = "UPDATE users SET username = '$username' WHERE id = '". $_SESSION['user_id'] ."'"; $check = mysql_query("SELECT username FROM users WHERE username='$username'"); $pwcheck = mysql_query("SELECT password FROM users WHERE username='$username'"); $numrows = mysql_num_rows($check); if (isset($_POST['eu'])) { if ($username) { if ($numrows!=0) { echo "This username already exists!"; } else { mysql_query($update); session_start(); session_destroy(); header("location: logout.php"); } } else echo "Please enter a username"; } else { if(isset($_POST['ue'])) { if ($cpassword&&$npassword) { while($row = mysql_fetch_assoc($pwcheck)) { $dbpass = $row['password']; } $hcpassword = md5($cpassword); $hnpassword = md5($npassword); if ($hcpassword==$dbpass) { if (strlen($npassword)>35 || strlen($npassword)<6) { echo "Your password must be between 6 and 25 characters."; } else { $updatepass = "UPDATE users SET password = '$hnpassword' WHERE id='". $_SESSION['user_id'] ."'"; mysql_query($updatepass); echo "Your password has been changed."; } } else { echo "This is not your current password."; } } else echo "Please field in both fields."; } } if (!$_SESSION['user_id']) { echo "you must be logged in to view this page"; } else { echo "<head> <title>My account</title> </head> <body> <form action='account.php' method='POST'> <h1>Username</h1> <a href='me.php'>Go back</a> Edit username <input type='text' name='username'> <input type='submit' name='eu' value='Update account'></form> </form> <form action='account.php' method='POST'> <h1>Change password</h1> <input type=\"hidden\" name=\"username\" value=\"". $_SESSION['user'] ."\" /> Current password <input type='password' name='cpassword'> New password <input type='password' name='npassword'> <input type='submit' name='ue' value='Submit'> </form> </body> "; } [/PHP] Here is the database structure : [URL='http://sharefast.net/view/WNowEvkQik8z']http://sharefa.st/view/WNowEvkQik8z[/URL] -- Hope you like it :) Any question about this script , please contact me. Added the config.php page for easier database configuration. [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members