Здравейте седнах да напиша една логин система обаче имам проблем след като добавих md5 + salt.
register.php
Проблема ми идва когато трябва да се логна постояно ми дава паролата не е правилна :
register.php
PHP:
<?php
include_once 'conf.php';
$date = date("d.m.20y");
echo "<form action='?user=add' method='post'>"
."Username: <input type='text' name='username' size='30'><br>"
."Password: <input type='password' name='password' size='30'><br>"
."Confirm your password: <input type='password' name='password2' size='30'><br>"
."Email: <input type='text' name='email' size='30'><br>"
."<input type='hidden' name='date' value='$date'>"
."<input type='submit' name='submit' value='Регистрация'>"
."</form>";
If (isset($_POST['submit'])) {
$username = addslashes(htmlspecialchars($_POST['username']));
$salt = "deal";
$password = trim($salt.$_POST['password']);
$pass2 = trim(addslashes(htmlspecialchars($_POST['password2'])));
$email = addslashes(htmlspecialchars($_POST['email']));
$date = addslashes(htmlspecialchars($_POST['date']));
$select = mysql_query("SELECT username FROM users WHERE username = '$username'");
$num = mysql_num_rows($select);
if(empty($username)) $str = "Моля въведете Потр.име!<br>";
if(empty($password)) $str ="Моля въведете парола!<br>";
if(empty($pass2) ) $str ="Моля повторете паролата!<br>";
If (strlen($password) < 5) $str = "Моля въведете парола по голяма от 5 знака!<br>";
if(empty($email)) $str ="Моля въведете e-mail!";
If ($password != $pass2) $str="Паролите не съвпадат!";
if($num > 0) $str = "Такъв потребител вече съществува!<br>";
echo $str;
If (empty($str)) {
$insert = mysql_query("INSERT INTO users (username, password, email,date) VALUES ('$username', md5('$password'), '$email','$date')");
echo "Добре дошъл ," .$username.'<br><a href="login.php">Влез</a>';
mysql_close();
}
}
?>
PHP:
<?php
include_once 'conf.php';
echo "<form action='?user=login' method='post'>"
."Username: <input type='text' name='username' size='30'><br>"
."Password: <input type='password' name='password' size='30'><br>"
."<input type='submit' name='submit' value='Регистрация'>"
."</form>";
If (isset($_POST['submit'])) {
$username = $_POST['username'];
$salt = "deal";
$pass = $_POST['password'];
$epass= md5($salt.$pass);
$select = mysql_query("SELECT * FROM users WHERE username='$username' AND password='$epass'");
$num = mysql_fetch_array($select);
$user = $num['username'];
If (!$username = $user){echo"Wrong password or username!";}
echo '<a href="index.php">index</a>';
session_register("username", $username);
session_register("password", $password);
}
?>
