Защо не сменя паролата

freboy · 29 Януари 2010

за да не правя нова тема ще променя тази.
Защо не ми сменя паролата ето ви и кода

Код:

<?php
define('IN_VALID', true);
echo ('
<div id="rightbar">');
$our = mysql_query("SELECT * FROM users WHERE id= '$my_ime'");
while($row = mysql_fetch_array($our)) {
$skype = $row['skype'];
$web = $row['web'];
$podpis = $row['podpis'];
$avatar = $row['avatar'];
}
if (!isset($_POST['update'])) {
echo ("
<form method=\"POST\">



<center> Стара Парола <center>

<td><input type=\"password\" name=\"aparola\" class=\"input\"></td>

<center> Нова парола <center>

<td><input type=\"password\" name=\"bparola\" class=\"input\"></td>

<input type=\"submit\" name=\"update\" value=\"Прати\" class=\"button\"></td>

</tr>
</table>

</form>");
}
else {
$staraparola = md5($_POST['aparola']);
$novataparola = md5($_POST['bparola']);
$povtorenaparola = md5($_POST['cparola']);
if (!empty($staraparola) and !empty($novataparola) and !empty($povtorenaparola)) {

$proverka = mysql_query("SELECT * FROM users WHERE id='$my_ime'") or die(mysql_error());

$r = mysql_fetch_array($proverka);
$userpassword = $r['password'];
if ($staraparola == $userpassword) {
if ($novataparola == $povtorenaparola) {

mysql_query("UPDATE users SET password = '$novataparola' WHERE id= '$my_ime'") or die(mysql_error());

}
else { echo (" <center> Старата парола е невалидна! <center> "); }
}
echo (" <center> Паролата е сменена успешно! <center> "); }
}
echo ("");
echo ('');
?>
</td>
</tr>
</table>

Dizasterr · 29 Януари 2010

Криптирал ли си паролата в базата данни ?

freboy · 29 Януари 2010

плс хелп

Dizasterr · 29 Януари 2010

Код:

 <?php
define('IN_VALID', true);
echo ('
<div id="rightbar">');
$our = mysql_query("SELECT * FROM users WHERE id= '$my_ime'");
while($row = mysql_fetch_array($our)) {
$skype = $row['skype'];
$web = $row['web'];
$podpis = $row['podpis'];
$avatar = $row['avatar'];
}
echo ("
<form method=\"POST\">



<center> Стара Парола <center>

<td><input type=\"password\" name=\"aparola\" class=\"input\"></td>

<center> Нова парола <center>

<td><input type=\"password\" name=\"bparola\" class=\"input\"></td>

<input type=\"submit\" name=\"update\" value=\"Прати\" class=\"button\"></td>

</tr>
</table>

</form>");
if (!isset($_POST['update'])) {
$staraparola = md5($_POST['aparola']);
$novataparola = md5($_POST['bparola']);
$povtorenaparola = md5($_POST['cparola']);
if (!empty($staraparola) || !empty($novataparola) || !empty($povtorenaparola)) {

$proverka = mysql_query("SELECT * FROM users WHERE id='$my_ime'") or die(mysql_error());

$r = mysql_fetch_assoc($proverka);
$userpassword = $r['password'];
if ($staraparola == $userpassword) {
if ($novataparola == $povtorenaparola) {

mysql_query("UPDATE users SET password = '$novataparola' WHERE id= '$my_ime'") or die(mysql_error());

}
else { echo (" <center> Старата парола е невалидна! <center> "); }
}
echo (" <center> Паролата е сменена успешно! <center> "); }
}
echo ("");
echo ('');
?>
</td>
</tr>
</table>

freboy · 29 Януари 2010

Dizasterr каза:

Код:

 <?php
define('IN_VALID', true);
echo ('
<div id="rightbar">');
$our = mysql_query("SELECT * FROM users WHERE id= '$my_ime'");
while($row = mysql_fetch_array($our)) {
$skype = $row['skype'];
$web = $row['web'];
$podpis = $row['podpis'];
$avatar = $row['avatar'];
}
echo ("
<form method="POST">



<center> Стара Парола <center>

<td><input type="password" name="aparola" class="input"></td>

<center> Нова парола <center>

<td><input type="password" name="bparola" class="input"></td>

<input type="submit" name="update" value="Прати" class="button"></td>

</tr>
</table>

</form>");
if (!isset($_POST['update'])) {
$staraparola = md5($_POST['aparola']);
$novataparola = md5($_POST['bparola']);
$povtorenaparola = md5($_POST['cparola']);
if (!empty($staraparola) || !empty($novataparola) || !empty($povtorenaparola)) {

$proverka = mysql_query("SELECT * FROM users WHERE id='$my_ime'") or die(mysql_error());

$r = mysql_fetch_assoc($proverka);
$userpassword = $r['password'];
if ($staraparola == $userpassword) {
if ($novataparola == $povtorenaparola) {

mysql_query("UPDATE users SET password = '$novataparola' WHERE id= '$my_ime'") or die(mysql_error());

}
else { echo (" <center> Старата парола е невалидна! <center> "); }
}
echo (" <center> Паролата е сменена успешно! <center> "); }
}
echo ("");
echo ('');
?>
</td>
</tr>
</table>

Няма промяна

Dizasterr · 29 Януари 2010

Код:

<?php
define('IN_VALID', true);
echo '<div id="rightbar">';
$our = mysql_query("SELECT * FROM users WHERE id= '$my_ime'");
while($row = mysql_fetch_array($our)) {
$skype = $row['skype'];
$web = $row['web'];
$podpis = $row['podpis'];
$avatar = $row['avatar'];
}
echo "<form method='post' action=''>";

echo "<center> Стара Парола <center>";

echo "<td><input type='password' name='aparola' class='input'></td>";

echo "<center> Нова парола <center>";

echo "<td><input type='password' name='bparola' class='nput'></td>";

echo "<input type='submit' name='update' value='Прати' class='button'></td>";

echo "</tr>";
echo "</table>";

echo "</form>";
if (!isset($_POST['update'])) {
$staraparola = md5($_POST['aparola']);
$novataparola = md5($_POST['bparola']);
$povtorenaparola = md5($_POST['cparola']);
if (!empty($staraparola) || !empty($novataparola) || !empty($povtorenaparola)) {

$proverka = mysql_query("SELECT * FROM `users` WHERE id='$my_ime'") or die(mysql_error());

$r = mysql_fetch_assoc($proverka);
$userpassword = $r['password'];
if ($staraparola == $userpassword) {
if ($novataparola == $povtorenaparola) {

mysql_query("UPDATE `users` SET password = '$novataparola' WHERE id= '$my_ime'") or die(mysql_error());

}
else { 
echo " <center> Старата парола е невалидна! <center> "; 
}
}
echo " <center> Паролата е сменена успешно! <center> "; 
}
}
echo "";
echo '';
?>

freboy · 29 Януари 2010

Dizasterr каза:

Код:

<?php
define('IN_VALID', true);
echo '<div id="rightbar">';
$our = mysql_query("SELECT * FROM users WHERE id= '$my_ime'");
while($row = mysql_fetch_array($our)) {
$skype = $row['skype'];
$web = $row['web'];
$podpis = $row['podpis'];
$avatar = $row['avatar'];
}
echo "<form method='post' action=''>";

echo "<center> Стара Парола <center>";

echo "<td><input type='password' name='aparola' class='input'></td>";

echo "<center> Нова парола <center>";

echo "<td><input type='password' name='bparola' class='nput'></td>";

echo "<input type='submit' name='update' value='Прати' class='button'></td>";

echo "</tr>";
echo "</table>";

echo "</form>";
if (!isset($_POST['update'])) {
$staraparola = md5($_POST['aparola']);
$novataparola = md5($_POST['bparola']);
$povtorenaparola = md5($_POST['cparola']);
if (!empty($staraparola) || !empty($novataparola) || !empty($povtorenaparola)) {

$proverka = mysql_query("SELECT * FROM `users` WHERE id='$my_ime'") or die(mysql_error());

$r = mysql_fetch_assoc($proverka);
$userpassword = $r['password'];
if ($staraparola == $userpassword) {
if ($novataparola == $povtorenaparola) {

mysql_query("UPDATE `users` SET password = '$novataparola' WHERE id= '$my_ime'") or die(mysql_error());

}
else { 
echo " <center> Старата парола е невалидна! <center> "; 
}
}
echo " <center> Паролата е сменена успешно! <center> "; 
}
}
echo "";
echo '';
?>

не се променя

c3c0 · 29 Януари 2010

Криптирай паролата след като провериш дали е попълнена. Пробвай така:

Код:

<?php
define('IN_VALID', true);
echo '<div id="rightbar">';
$our = mysql_query("SELECT * FROM users WHERE id= '$my_ime'");
while($row = mysql_fetch_array($our)) {
$skype = $row['skype'];
$web = $row['web'];
$podpis = $row['podpis'];
$avatar = $row['avatar'];
}
echo "<form method='post' action=''>";

echo "<center> Стара Парола <center>";

echo "<td><input type='password' name='aparola' class='input'></td>";

echo "<center> Нова парола <center>";

echo "<td><input type='password' name='bparola' class='nput'></td>";

echo "<input type='submit' name='update' value='Прати' class='button'></td>";

echo "</tr>";
echo "</table>";

echo "</form>";
if (!isset($_POST['update'])) {
$staraparola = $_POST['aparola'];
$novataparola = $_POST['bparola'];
$povtorenaparola = $_POST['cparola'];
if (!empty($staraparola) || !empty($novataparola) || !empty($povtorenaparola)) {
// криптираш  след като провериш дали са въведени паролите.
$staraparola = md5($staraparola);
$novataparola = md5($novataparola);
$povtorenaparola = md5($povtorenaparola);

$proverka = mysql_query("SELECT * FROM `users` WHERE id='$my_ime'") or die(mysql_error());

$r = mysql_fetch_assoc($proverka);
$userpassword = $r['password'];
if ($staraparola == $userpassword) {
if ($novataparola == $povtorenaparola) {

mysql_query("UPDATE `users` SET password = '$novataparola' WHERE id= '$my_ime'") or die(mysql_error());

}
else {
echo " <center> Старата парола е невалидна! <center> ";
}
}
echo " <center> Паролата е сменена успешно! <center> ";
}
}
echo "";
echo '';
?>

freboy · 29 Януари 2010

c3c0 каза:

Криптирай паролата след като провериш дали е попълнена. Пробвай така:

Код:

<?php
define('IN_VALID', true);
echo '<div id="rightbar">';
$our = mysql_query("SELECT * FROM users WHERE id= '$my_ime'");
while($row = mysql_fetch_array($our)) {
$skype = $row['skype'];
$web = $row['web'];
$podpis = $row['podpis'];
$avatar = $row['avatar'];
}
echo "<form method='post' action=''>";

echo "<center> Стара Парола <center>";

echo "<td><input type='password' name='aparola' class='input'></td>";

echo "<center> Нова парола <center>";

echo "<td><input type='password' name='bparola' class='nput'></td>";

echo "<input type='submit' name='update' value='Прати' class='button'></td>";

echo "</tr>";
echo "</table>";

echo "</form>";
if (!isset($_POST['update'])) {
$staraparola = $_POST['aparola'];
$novataparola = $_POST['bparola'];
$povtorenaparola = $_POST['cparola'];
if (!empty($staraparola) || !empty($novataparola) || !empty($povtorenaparola)) {
// криптираш  след като провериш дали са въведени паролите.
$staraparola = md5($staraparola);
$novataparola = md5($novataparola);
$povtorenaparola = md5($povtorenaparola);

$proverka = mysql_query("SELECT * FROM `users` WHERE id='$my_ime'") or die(mysql_error());

$r = mysql_fetch_assoc($proverka);
$userpassword = $r['password'];
if ($staraparola == $userpassword) {
if ($novataparola == $povtorenaparola) {

mysql_query("UPDATE `users` SET password = '$novataparola' WHERE id= '$my_ime'") or die(mysql_error());

}
else {
echo " <center> Старата парола е невалидна! <center> ";
}
}
echo " <center> Паролата е сменена успешно! <center> ";
}
}
echo "";
echo '';
?>

Няма промяна

madmax3 · 29 Януари 2010

1. Каква е идеята на това :

while($row = mysql_fetch_array($our)) {
$skype = $row['skype'];
$web = $row['web'];
$podpis = $row['podpis'];
$avatar = $row['avatar'];
}

Предложение:

$our = mysql_query("SELECT * FROM users WHERE id= '$my_ime' LIMIT 1");
$row = mysql_fetch_array($our);

id= '$my_ime' или id= '$UserID' - в смисъл id поредния номер ли е или е потребителско име ?

2. Това как изглежда :

echo "<center> Нова парола <center>";

echo "<td><input type='password' name='bparola' class='nput'></td>";

Предложение: <td align='center'><input type='password' name='bparola' class='nput'></td>

Приемам, че class='nput' е вярно (не е class='input');

3. Затвори таговете <center> Старата парола е невалидна! <center>

4. if (!isset($_POST['update'])) { ... mysql_query("UPDATE `users` SET password = '$novataparola' WHERE id= '$my_ime'") or die(mysql_error()); ... } ???

Защо не сменя паролата

freboy

Registered

Dizasterr

Registered

freboy

Registered

Dizasterr

Registered

freboy

Registered

Dizasterr

Registered

freboy

Registered

c3c0

Registered

freboy

Registered

madmax3

Registered