ub3rl33t php problems

[Macemore]

No matter what, the login will be false even when it shouldn't.

<?php
define('awesome', '1');
include('../inc.php');
mysql_connect($host, $usr, $pwd);
mysql_select_db($db);
 
if(isset($_POST['user'], $_POST['pass'])) {
$user = mysql_real_escape_string(htmlentities(stripslashes($_POST['user'])));
$pass = sha1($_POST['pass']);
 
$log = mysql_query("SELECT COUNT(`user_id`) FROM `users` WHERE `username` = `{$user}` AND `password` = `{$pass}`") or die(mysql_error());
$tell = mysql_result($log, 0);
}
 
if($tell == 0) {
 echo "Incorrect login, <a href='index.php'>go back</a>";
} else {
 $_SESSION['loggedin'] = '1';
 echo "Successfully logged in, <a href='admin.php'>go to admin</a>";
}
 
?>

Any help?

 

[Habbos]

Ok and what error does it give up?

 

[Macemore]

Ok and what error does it give up?

None...
the login just returns false when it should be true...

 

[Sledmore]

Try this?

<?php
define('awesome', '1');
include('../inc.php');
mysql_connect($host, $usr, $pwd);
mysql_select_db($db);
 
if(isset($_POST['user']), isset($_POST['pass'])) {
$user = mysql_real_escape_string(htmlentities(stripslashes($_POST['user'])));
$pass = sha1($_POST['pass']);
 
$log = mysql_query("SELECT COUNT(`user_id`) FROM `users` WHERE `username` = `{$user}` AND `password` = `{$pass}`") or die(mysql_error());
$tell = mysql_result($log, 0);
}
 
if($tell == 0) {
 echo "Incorrect login, <a href='index.php'>go back</a>";
} else {
 $_SESSION['loggedin'] = '1';
 echo "Successfully logged in, <a href='admin.php'>go to admin</a>";
}
 
?>

 

[Macemore]

Try this?

<?php
define('awesome', '1');
include('../inc.php');
mysql_connect($host, $usr, $pwd);
mysql_select_db($db);
 
if(isset($_POST['user']), isset($_POST['pass'])) {
$user = mysql_real_escape_string(htmlentities(stripslashes($_POST['user'])));
$pass = sha1($_POST['pass']);
 
$log = mysql_query("SELECT COUNT(`user_id`) FROM `users` WHERE `username` = `{$user}` AND `password` = `{$pass}`") or die(mysql_error());
$tell = mysql_result($log, 0);
}
 
if($tell == 0) {
echo "Incorrect login, <a href='index.php'>go back</a>";
} else {
$_SESSION['loggedin'] = '1';
echo "Successfully logged in, <a href='admin.php'>go to admin</a>";
}
 
?>

At first I got "unexpected , on line 7" so I changed it to
if(isset($_POST['user']) and isset($_POST['pass'])) {
then it just was incorrect.

 

[Sledmore]

At first I got "unexpected , on line 7" so I changed it to
if(isset($_POST['user']) and isset($_POST['pass'])) {
then it just was incorrect.

<?php
define('awesome', '1');
include('../inc.php');
mysql_connect($host, $usr, $pwd);
mysql_select_db($db);

if ($_POST['user'] && $_POST['pass']) {
$user = mysql_real_escape_string(htmlentities(stripslashes($_POST['user'])));
$pass = sha1($_POST['pass']);

$log = mysql_query("SELECT COUNT(`user_id`) FROM `users` WHERE `username` = `{$user}` AND `password` = `{$pass}`") or die(mysql_error());
$tell = mysql_result($log, 0);
}

if($tell == 0) {
echo "Incorrect login, <a href='index.php'>go back</a>";
} else {
$_SESSION['loggedin'] = '1';
echo "Successfully logged in, <a href='admin.php'>go to admin</a>";
}

?>

Might wanna before that do, 'if (isset($_POST['buttoname']))'

 

[Macemore]

<?php
define('awesome', '1');
include('../inc.php');
mysql_connect($host, $usr, $pwd);
mysql_select_db($db);

if ($_POST['user'] && $_POST['pass']) {
$user = mysql_real_escape_string(htmlentities(stripslashes($_POST['user'])));
$pass = sha1($_POST['pass']);

$log = mysql_query("SELECT COUNT(`user_id`) FROM `users` WHERE `username` = `{$user}` AND `password` = `{$pass}`") or die(mysql_error());
$tell = mysql_result($log, 0);
}

if($tell == 0) {
echo "Incorrect login, <a href='index.php'>go back</a>";
} else {
$_SESSION['loggedin'] = '1';
echo "Successfully logged in, <a href='admin.php'>go to admin</a>";
}

?>

Might wanna before that do, 'if (isset($_POST['buttoname']))'

I changed it to:

<?php
define('awesome', '1');
include('../inc.php');
mysql_connect($host, $usr, $pwd);
mysql_select_db($db);
 
if(isset($_POST['user'])) {
if(isset($_POST['pass'])) {
$user = mysql_real_escape_string(htmlentities(stripslashes($_POST['user'])));
$pass = sha1($_POST['pass']);
 
$log = mysql_query("SELECT COUNT(`user_id`) FROM `users` WHERE `username` = `{$user}` AND `password` = `{$pass}`") or die(mysql_error());
$tell = mysql_result($log, 0);
} else {
echo 'You must specify a password';
}
} else {
echo 'You must specify a username';
}
 
if($tell == 0) {
echo "Incorrect login, <a href='index.php'>go back</a>";
} else {
$_SESSION['loggedin'] = '1';
echo "Successfully logged in, <a href='admin.php'>go to admin</a>";
}
 
?>

then it gave me "You must specify a username"
instead of name= I had id= on the form. works now, thanks guys.

 

[Sledmore]

Thread closed.