RE: Help with

["Richard Hart" <rjhart10@xxxxxxxxxxxxxx>]

Thanks for your help Bastien.

I have changed the authentication procedure but have come up against another
problem.
This time I am allowing the users to choose their unique usernames and
passwords which
will be stored in a mysql database. However when I check to see if their
details exist
in the databse I get:

Warning: mysqli_query() expects parameter 1 to be mysqli, resource given in
login.php

any help would be appreciated.

Here is the code:

$username=$_POST['l_username'];
$password=$_POST['l_password'];

// connect to mysql
$dbcon = mysql_connect( 'localhost', 'root', 'password', 'database_name' );
if (!$dbcon) {
	echo 'Cannot connect to the database.';
	exit;
}

// query the database to see if there is a matching username and password
$query = "select count(*) from users where username = '$username' and
password = '$password'";

$result = mysqli_query($dbcon, $query);
if (!$result) {
	echo 'Sorry can't run query';
	exit;
}
$row = mysqli_fetch_row($result);
$count = $row[0];

if ($count > 0) {
	echo 'You have successfully logged on.';
}
else {
	echo "Your username and/or password have not been accepted. Please <a
href='javascript:history.back();'>go back</a> and try again.";
}

Thanks

Richard

-----Original Message-----
From: Bastien Koert [mailto:bastien_k@xxxxxxxxxxx]
Sent: 30 August 2005 00:59
To: rjhart10@xxxxxxxxxxxxxx; php-db@xxxxxxxxxxxxx
Subject: RE:  Help with


you don't have a connection to the db...either because the name.password, db
name are wrong or you lack the needed permissions to allow the query...

note that this query is a really back idea...opens the whole db up...better
to provide one connection and allow the users basic read write access only

bastien


>From: "Richard Hart" <rjhart10@xxxxxxxxxxxxxx>
>To: <php-db@xxxxxxxxxxxxx>
>Subject:  Help with Date: Mon, 29 Aug 2005 23:27:46 +0100
>
>Hi
>
>I'm new to PHP/MySQL and wondered if anyone on this list would be kind
>enough to help me solve
>this problem. I'm trying to automatically set up a users privileges on a
>MySQL table using the
>username and password selected by them in an html form. I get the error
>message:
>
>"Warning: mysql_query(): supplied argument is not a valid MySQL-Link
>resource"
>
>for the code below:
>
><?php
>
>$username=$_POST['username'];
>$password=$_POST['password'];
>
>@ $db = new mysqli('localhost', 'root', 'password', 'database_table');
>
>if (mysqli_connect_errno())
>{
>	echo 'Error: Could not connect to database. Please try again later.';
>	exit;
>}
>
>$grant_privilege = "grant select, insert, delete, update on name_of_table
>to
>$username identified by '$password'";
>mysql_query($grant_privilege, $db);
>
>$db->close();
>
>?>
>
>Can anyone help?
>
>Thanks
>
>Richard
>
>--
>PHP Database Mailing List (http://www.php.net/)
>To unsubscribe, visit: http://www.php.net/unsub.php
>

-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php