problem with php

[ruzana]

yg dekat pengguna tu letak name table y kite nak panggil username ngan katalaluan dlm database ea??

 

[anuar76]

sy dah try..tp bile masukkan katalaluan ngn username same ngn dalam databse,still dye ckp slh msuk pwd n kata laluan

Sebab katalaluan dlm database dah kena encrypted...

Contohnya katalaluan dlm database skrg abkfj2343mf, bila nak login tak boleh guna value sama sebab script dah encrypt kat sini

$encrypted_mypassword=md5($mypassword);

Kalau tak nak encrypted password kena ubah lagi jadi mcm kat bawah ni:

<?php

$mysql_server = "localhost";
$mysql_user = "root";
$mysql_password = "";
$mysql_database = "sistem_aduan_kerosakan_ict";

$conn = mysql_connect($mysql_server, $mysql_user, $mysql_password);

mysql_select_db($mysql_database, $conn);


// username and password sent from form
$myusername=$_POST['username'];
$mypassword=$_POST['password'];

$sql="SELECT * FROM pengguna WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);


// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);


// If result matched $myusername and $mypassword, table row must be 1 row
if($result){
	if(mysql_num_rows($result) > 0){
	// Register $myusername, $mypassword and redirect to file "login_success.php"
	session_start();
	$_SESSION['username'] = $myusername;
	$_SESSION['password'] = $mypassword;
	header("location:berjaya semak.php");
	}
}else {
	echo "Username dan Kata Laluan salah";
}
?>

Kalau utk project college/uni boleh la buat mcm ni sebab security tak penting, tapi kalau real life code mcm ni tak digalakkan sebab senang hacker nak masuk.

 

[ruzana]

Sebab katalaluan dlm database dah kena encrypted...

Contohnya katalaluan dlm database skrg abkfj2343mf, bila nak login tak boleh guna value sama sebab script dah encrypt kat sini

$encrypted_mypassword=md5($mypassword);

Kalau tak nak encrypted password kena ubah lagi jadi mcm kat bawah ni:

<?php

$mysql_server = "localhost";
$mysql_user = "root";
$mysql_password = "";
$mysql_database = "sistem_aduan_kerosakan_ict";

$conn = mysql_connect($mysql_server, $mysql_user, $mysql_password);

mysql_select_db($mysql_database, $conn);


// username and password sent from form
$myusername=$_POST['username'];
$mypassword=$_POST['password'];

$sql="SELECT * FROM pengguna WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);


// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);


// If result matched $myusername and $mypassword, table row must be 1 row
if($result){
	if(mysql_num_rows($result) > 0){
	// Register $myusername, $mypassword and redirect to file "login_success.php"
	session_start();
	$_SESSION['username'] = $myusername;
	$_SESSION['password'] = $mypassword;
	header("location:berjaya semak.php");
	}
}else {
	echo "Username dan Kata Laluan salah";
}
?>

Kalau utk project college/uni boleh la buat mcm ni sebab security tak penting, tapi kalau real life code mcm ni tak digalakkan sebab senang hacker nak masuk.

ooo yeke??hmmm,,still same la,,dye masih ckp katalaluan n username salah((((

 

[anuar76]

ooo yeke??hmmm,,still same la,,dye masih ckp katalaluan n username salah((((

mysql db tu ada tak table name pengguna dgn column username and password. Kalau script tetap keluar salah maknanya takde match. Yg ni bukan php error lagi tapi sebab mysql tak jumpa username dgn password yg dimasukkan.

 

[ruzana]

mysql db tu ada tak table name pengguna dgn column username and password. Kalau script tetap keluar salah maknanya takde match. Yg ni bukan php error lagi tapi sebab mysql tak jumpa username dgn password yg dimasukkan.

ok thanks dah oke!!!
tp ade prob sikit la,,
sebab,login ni digunakan oleh admin ngan staff,,so,dalam database,saya satu kan table utk kedue2 ni,,mcm mane sistem nak kenal same ade y masuk tu admin atau staff???

 

[anuar76]

ok thanks dah oke!!!
tp ade prob sikit la,,
sebab,login ni digunakan oleh admin ngan staff,,so,dalam database,saya satu kan table utk kedue2 ni,,mcm mane sistem nak kenal same ade y masuk tu admin atau staff???

Senang jer ni, tambah lagi satu column dlm table pengguna tu sebagai flag user tu admin atau staff.

Nak tido dah... kalau de pape soalan baru esok la baru dpt jawab

 

[ruzana]

Senang jer ni, tambah lagi satu column dlm table pengguna tu sebagai flag user tu admin atau staff.

Nak tido dah... kalau de pape soalan baru esok la baru dpt jawab

ha flag user??ape tu??ok2,,thanks ea,,mcm mane nak buat??

 

[faidzal]

ok thanks dah oke!!!
tp ade prob sikit la,,
sebab,login ni digunakan oleh admin ngan staff,,so,dalam database,saya satu kan table utk kedue2 ni,,mcm mane sistem nak kenal same ade y masuk tu admin atau staff???

kena buat level.

1. create satu field untuk level.
2. definekan level 1 = admin ; level 2 = user
3. so bila admin login ke dalam akaunya, maka proses tu baca kalau admin, akan pegi ke page sekian, sekian dan sebaliknya.

 

[ruzana]

kena buat level.

1. create satu field untuk level.
2. definekan level 1 = admin ; level 2 = user
3. so bila admin login ke dalam akaunya, maka proses tu baca kalau admin, akan pegi ke page sekian, sekian dan sebaliknya.

ha mcm mane ea??
lagi satu nak tnye,kalau kite da define kat databse tu sebagai user n admin,bile login tu berjaye,dye akan panggil page ape??
contoh :
<?php

$mysql_server = "localhost";
$mysql_user = "root";
$mysql_password = "";
$mysql_database = "sistem_aduan_kerosakan_ict";

$conn = mysql_connect($mysql_server, $mysql_user, $mysql_password);

mysql_select_db($mysql_database, $conn);


// username and password sent from form
$myusername=$_POST['username'];
$mypassword=$_POST['password'];

$sql="SELECT * FROM pengguna WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);


// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);


// If result matched $myusername and $mypassword, table row must be 1 row
if($result){

// Register $myusername, $mypassword and redirect to file "login_success.php"
session_start();
$_SESSION['username'] = $myusername;
$_SESSION['password'] = $mypassword;
}
if(mysql_num_rows($result) > 0){
echo("<SCRIPT language='javascript'>
window.alert('Katalaluan betul');
window.location='../pentadbir.php';
</SCRIPT>");
exit;
}else {
echo("<SCRIPT language='javascript'>
window.alert('Katalaluan salah');
window.location='../index.php';
</SCRIPT>");
exit;
}
?>

y dekat windows.location tu nak letak name file ape??

 

[faidzal]

ha mcm mane ea??
lagi satu nak tnye,kalau kite da define kat databse tu sebagai user n admin,bile login tu berjaye,dye akan panggil page ape??
contoh :
<?php

$mysql_server = "localhost";
$mysql_user = "root";
$mysql_password = "";
$mysql_database = "sistem_aduan_kerosakan_ict";

$conn = mysql_connect($mysql_server, $mysql_user, $mysql_password);

mysql_select_db($mysql_database, $conn);


// username and password sent from form
$myusername=$_POST['username'];
$mypassword=$_POST['password'];

$sql="SELECT * FROM pengguna WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);


// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);


// If result matched $myusername and $mypassword, table row must be 1 row
if($result){

// Register $myusername, $mypassword and redirect to file "login_success.php"
session_start();
$_SESSION['username'] = $myusername;
$_SESSION['password'] = $mypassword;
}
if(mysql_num_rows($result) > 0){
echo("<SCRIPT language='javascript'>
window.alert('Katalaluan betul');
window.location='../pentadbir.php';
</SCRIPT>");
exit;
}else {
echo("<SCRIPT language='javascript'>
window.alert('Katalaluan salah');
window.location='../index.php';
</SCRIPT>");
exit;
}
?>

y dekat windows.location tu nak letak name file ape??

Filename apa? kalau laluan betol, pegi ke page pentadbir.php, kalau laluan salah, pegi ke page yg salah.

proses kau ni xde leveling. jap aku tules.