PHP - Moved: Php Based Login System?

Hi Everyone,

Just a quick question before I take on this project.

Basically the client has a secure server set up with folders for different clients. So they can store excel files, PDFs etc, What the client use to do was send the client an email with the http address of that clients particular folder to be able to login.

What my job is to create a login system that redirects each client to their particular area on the secure system.

Is this going to be difficult,

What I was thinking of doing was when the administator is setting up the client details there would be an extra field saying address: they paste the address of the folder on the server. Then it will redirect them to their folder.

Is this the correct way to do this.

Any help or advice would be great.

I'm trying to build a login system and alot of the code is similar to what i used to make my news cms. basically all i wanna accomplish right now is to get the user input inserted into my database. I've already tested it out, and I get no errors, but like with the cms, the database isn't getting queryed.

Here's the code:
(process.php)
Code: [Select]
<?php
 $first_name=$_POST['first_name']; 
 $last_name=$_POST['last_name']; 
 $age=$_POST['age']; 
 $city=$_POST['city']; 
 $state=$_POST['state']; 
 $country=$_POST['country']; 
 $zip=$_POST['zip']; 
 $birthdate=$_POST['birthdate']; 
 $gender=$_POST['gender']; 
 $sexuality=$_POST['sexuality']; 
 $race=$_POST['race']; 
 $religion=$_POST['religion']; 
 $status=$_POST['status']; 
 $about=$_POST['about']; 
 $website=$_POST['website']; 
 $user_name=$_POST['user_name']; 
 $password=$_POST['password']; 
 $email=$_POST['email']; 
 mysql_connect("your hostname", "your database name", "your password") or die(mysql_error()); 
 mysql_select_db("your database name") or die(mysql_error()); 
 
 $sql = sprintf("INSERT INTO Users (first_name, last_name, age, city, state, country, zip, birthdate, gender, sexuality, race, religion, status, about, website, user_name, password, email)
VALUES ('%s', '%s', '%s', '%s', '%s')",
mysql_real_escape_string($first_name),
mysql_real_escape_string($last_name),
mysql_real_escape_string($age),
mysql_real_escape_string($city),
mysql_real_escape_string($state),
mysql_real_escape_string($country),
mysql_real_escape_string($zip),
mysql_real_escape_string($birthdate),
mysql_real_escape_string($gender),
mysql_real_escape_string($sexuality),
mysql_real_escape_string($race),
mysql_real_escape_string($religion),
mysql_real_escape_string($status),
mysql_real_escape_string($about),
mysql_real_escape_string($website),
mysql_real_escape_string($user_name),
mysql_real_escape_string($password),
mysql_real_escape_string($email));
$result = mysql_query($sql); 
 
 
 Print "Congratulations! You are now a registered member on yourwebsite.com!"; 
 ?>
(register/index.php)
Code: [Select]
<script language = "Javascript">
 
function Validate()
{
    if (document.register.first_name.value == '')
    {
        alert('You have not specified your first name!');
        return false;
    }
if (document.register.last_name.value == '')
    {
        alert('You have not specified your last name!');
        return false;
    }
if (document.register.age.value == '')
    {
        alert('You have not specified your age!');
        return false;
    }
if (document.register.country.value == '')
    {
        alert('You have not entered a country!');
        return false;
    }
if (document.register.birthdate.value == '')
    {
        alert('You have not entered your date of birth!');
        return false;
    }
if (document.register.gender.value == '')
    {
        alert('You have not specified your gender!');
        return false;
    }
if (document.register.user_name.value == '')
    {
        alert('You have not entered a username!');
        return false;
    }
if (document.register.email.value == '')
    {
        alert('You have not entered an email!');
        return false;
    }
if (document.register.password.value == '')
    {
        alert('You have not entered a password!');
        return false;
    }
    return true;
}
</script>
      <form name="register" method="post" action="http://www.djsmiley.net/register/process.php" onsubmit="return Validate();">
                    <table width="100%" border="0">
                      <tr>
                        <td>First Name:</td>
                        <td><label>
                          <input type="text" name="first_name" id="first_name" />
                        </label></td>
                      </tr>
                      <tr>
                        <td>Last Name:</td>
                        <td><input type="text" name="last_name" id="last_name" /></td>
                      </tr>
                      <tr>
                        <td>Age:</td>
                        <td><input type="text" name="age" id="age" /></td>
                      </tr>
                      <tr>
                        <td>City:</td>
                        <td><input type="text" name="city" id="city" /></td>
                      </tr>
                      <tr>
                        <td>State:</td>
                        <td><input type="text" name="state" id="state" /></td>
                      </tr>
                      <tr>
                        <td>Country:</td>
                        <td><input type="text" name="country" id="country" /></td>
                      </tr>
                      <tr>
                        <td>Zip:</td>
                        <td><input type="text" name="zip" id="zip" /></td>
                      </tr>
                      <tr>
                        <td>Birthdate:</td>
                        <td><input type="text" name="birthdate" id="birthdate" /></td>
                      </tr>
                      <tr>
                        <td>Gender:</td>
                        <td><input type="text" name="gender" id="gender" /></td>
                      </tr>
                      <tr>
                        <td>Sexuality:</td>
                        <td><input type="text" name="sexuality" id="sexuality" /></td>
                      </tr>
                      <tr>
                        <td>Race:</td>
                        <td><input type="text" name="race" id="race" /></td>
                      </tr>
                      <tr>
                        <td>Religion:</td>
                        <td><input type="text" name="religion" id="religion" /></td>
                      </tr>
                      <tr>
                        <td>Marital Status:</td>
                        <td><input type="text" name="status" id="status" /></td>
                      </tr>
                      <tr>
                        <td>About You:</td>
                        <td><label>
                          <textarea name="about" id="about" cols="45" rows="5"></textarea>
                        </label></td>
                      </tr>
                      <tr>
                        <td>Website:</td>
                        <td><input type="text" name="website" id="website" /></td>
                      </tr>
                      <tr>
                        <td width="13%">Username: </td>
                        <td width="87%"><input type="text" name="user_name" id="user_name" /></td>
                      </tr>
                      <tr>
                        <td>Email: </td>
                        <td><input type="text" name="email" id="email" /></td>
                      </tr>
                      <tr>
                        <td>Password: </td>
                        <td><input type="password" name="password" id="password" /></td>
                      </tr>
                      <tr>
                        <td>&nbsp;</td>
                        <td><input name="Register Button" type="submit" class="Button1" id="Register Button" value="Register" />
                        <input name="Reset Button" type="reset" class="Button1" id="Reset Button" value="Clear" /></td>
                      </tr>
                    </table>
                    <label></label>
      </form>

ok i need directing to a tutorial, an easyish one that can help me do a secure login and registration system. Something that uses sessions and mysql. something with sql injection and other security. i need it very secure.


hope you can help.

Hi, im getting alot of errors like so Deprecated: Function session_is_registered() is deprecated

time to update some files, can you guys pls help im rubbish with PHP guess thats why I waited so long to update.

here is the code I need to change
checklogin.php

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
session_register("myusername");
session_register("mypassword");
header("location:index.php");
}


index.php
<?
session_start();
/*if(!session_is_registered(myusername)){
header("location:main_login.php");
}*/
?>

index.php (display username stuff)
<?php if(session_is_registered(myusername)){ ?>&nbsp;&nbsp; Welcome: <?= $_SESSION['myusername'] ?><?php } ?>

index.php (edit content stuff)
<?php $file = file_get_contents('content/menu_header_a.txt', 'r');  if(session_is_registered(myusername)){ ?><a href="javascript:open4()"><?php echo $file ?></a><?php } else { echo $file; }?>

Many thanks for any and all your help with this one.

if you could keep it simple please like  ( replace this with this ) . thanks

Hi could you help me get this login page working? I made a form which posts to login.php the "user" and "pass".   Then this is my code for login.php:

<?php include("mysql_connect.inc.php"); ?>

<?php
$user = $_POST['user'];
$pass = $_POST['pass'];

session_start();
$query = mysqli_query("SELECT * FROM users WHERE username='$user'");
$results = mysqli_query($con, $query) or die(mysqli_error($con));
$resultsarray = mysql_fetch_array($userresults);

if (isset($_POST['user']) && $_POST['user'] == $query && isset($_POST['pass']) && $_POST['pass'] == $query) {
$_SESSION['username'] = $_POST['user'];
echo "<p>Login success. You are logged in as: " . $_SESSION['username'] . "</p>Return to mainpage, click <a href='index.php'>here</a>!";
} else {
echo "<p>Wrong username or password.</p>";

}
mysqli_close($con);
?>

Hi All!   This is my first post here, so if there are some things I miss or something more I need to do please let me know.   I tried searching the forum for the answer first but could not find anything.   So here is the thing; I followed a tutorial I found about building a login system for my website. The tutorial worked perfectly, except I needed it to redirect to a user specific page instead of a static page on login. I made the necessary changes to the script, and now it redirects to the user specific page, but does not recognize that I am logged in so it will not show me the content.   In the interest of full disclosure, I am not very good at PHP and lack a fundamental understanding of it. I am enrolled in some Udemy courses to try to rectify that, but I needed the login system ASAP, so copy and paste programming was my only option. I know, I know. I am a terrible human being and should be thrown into the sun. I agree. I am in counseling to try to deal with it.   The tutorial I used can be found he  http://www.wikihow.c...n-PHP-and-MySQL.   Here is the relevant code:   process_login.php:  

<?php


include_once 'db_connect.php';
include_once 'functions.php';


sec_session_start(); // Our custom secure way of starting a PHP session.


if (isset($_POST['email'], $_POST['p'])) {
    $email = $_POST['email'];
    $password = $_POST['p']; // The hashed password.


$page = login($email, $password, $mysqli);
if ($page == true) {
  // Login success        
  header('Location: '. $page);
   exit();


    } else {
        // Login failed 
        header('Location: ../error.php?error=1');
    }
} else {
    // The correct POST variables were not sent to this page. 
    echo 'Invalid Request';
}

First of all hello as I am new to this forum.

Ok so, I am have been trying for the past few days to create a login system in PHP for a website I am creating, and I am having serious problems. I have tryed so many tutorials and they all are not working, my conclusion is they are outdated or not fully understandable.

So what I want to create -
Registration
Forgot password
Login page
Email activation
Member page

My hosting has the latest php and mysql as far as I know so could someone please give me an up to date simple tutorial on creating this.

Lastly the program I am using is Dreamweaver CS5

Thankyou.

Hi guys. I have a problem in my web based examanation system written in php.

Here's the scenario:

when a user takes an exam. 1 question is displayed 1 at a time. my problem is if he/she is at the 2nd question then he/she pressed the back button he/she is redirected back to the 1st question and my system just go crazy. How can i prevent the user from pressing the back button or returning to the previous questions? Please I really need help on this. Can anyone give me suggestion for possible solutions on my problem?

Thanks in advance

by the way here's my code, you can also download it from attachment.

------------------------------------------process_exam.php------------------------------------------------------------

<?php
   
   //start session
   session_start();

   //declare variables
   //iCorrect= variable for score
   $_SESSION['iCorrect']=0;

   //a=variable for iteration kang index kang mga array or serves as an current item number
   $_SESSION['a']=1;

   //connect to database
   include('mysql_connect.php');

   $result = mysql_query("select * from questions where exam_id ='$_SESSION[exam_id]'");
   
   //count the number of found questions
   $_SESSION['num_of_questions']=mysql_num_rows($result);
   
   //declare the iterator
   $i=1;
   
   //get the options for the question1,question2 and so on and so on. depende kung ilang questions ang mafetch nya sa dbase.so pde kht ilang questions lagay ng user
   while ($row = mysql_fetch_assoc($result))
   {
      $questions[$i] = $row['question'];
      $op1[$i] = $row['op1'];
      $op2[$i] = $row['op2'];
      $op3[$i] = $row['op3'];
      $op4[$i] = $row['op4'];
      $answers[$i]=$row['answer'];
      $i++;
   }

   //view the data's in the array for debugging purposes
   echo 'answers: ';
   print_r($questions);
   echo '<br>';
   print_r($op1);
   echo '<br>';
   print_r($op2);
   echo '<br>';
   print_r($op3);
   echo '<br>';
   print_r($op4);
   echo '<br>';
   print_r($answers);
   echo '<br>';
   echo '<br>';


   //pass the arrays to session arrays to be used in other php pages
    $_SESSION['question']=$questions;
    $_SESSION['op1']=$op1;
    $_SESSION['op2']=$op2;
    $_SESSION['op3']=$op3;
    $_SESSION['op4']=$op4;
    $_SESSION['answers']=$answers;
   
   //print the arrays. debugging purposes
   //1 is the starting index of the array because the $i is equal to 1
   print_r($_SESSION['question']);
   echo '<br>';
   print_r($_SESSION['op1']);
   echo '<br>';
   print_r($_SESSION['op2']);
   echo '<br>';
   print_r($_SESSION['op3']);
   echo '<br>';
   print_r($_SESSION['op4']);
   echo '<br>';
   print_r($_SESSION['answers']);
   
   
   header("location:exam.php");

?>

</body>
</html>


----------------------------------------------------------exam.php--------------------------------------------------------------------

<?php
   //start session
   session_start();
   
   
   
   echo '<br>';
   echo '<br>';
   echo '<tr>';
   echo '<b>';
   echo 'Question: ';
   echo '<td align = center>'.$_SESSION['question'][$_SESSION['a']].'</td>';
   echo '</tr>';
   
   echo '<form method = "post" action= "nxt_question.php">';
   echo '<table border = "0">';
   echo '<tr>';
   //echo '<td>';
   echo "<td><Input type =\"Radio\" Name =\"choice\" value='".$_SESSION['op1'][$_SESSION['a']]."'>";
   echo '<td>'.$_SESSION['op1'][$_SESSION['a']].'</td>';
   echo '</tr>';
   echo '<tr>';
   echo "<td><Input type =\"Radio\" Name =\"choice\" value='".$_SESSION['op2'][$_SESSION['a']]."'>";
   echo '<td>'.$_SESSION['op2'][$_SESSION['a']].'</td>';
   echo '</td>';
   echo '</tr>';
   echo "<td><Input type =\"Radio\" Name =\"choice\" value='".$_SESSION['op3'][$_SESSION['a']]."'>";   
   echo '<td>'.$_SESSION['op3'][$_SESSION['a']].'</td>';
   echo '</tr>';
   echo "<td><Input type =\"Radio\" Name =\"choice\" value='".$_SESSION['op4'][$_SESSION['a']]."'>";
   echo '<td>'.$_SESSION['op4'][$_SESSION['a']].'</td>';
   echo '</tr>';
   echo '</table>';
   echo '<tr>
   <td>
   <input type = "submit" value="Next Question">
   </td>
   </tr>';
   echo '</form>';
   
   ?>

----------------------------------------------nxt_question.php-------------------------------------

<?php

   //start session
   session_start();

   //Checking of answers kada mag pindot next question button
   if(isset($_POST['choice']))
   {
      $ans_of_user=$_POST['choice'];
      $_SESSION['answers'][$_SESSION['a']];
      
      if (strcmp($ans_of_user,$_SESSION['answers'][$_SESSION['a']])==0)
         {
            $_SESSION["iCorrect"]++;
         }
   }

   //add 1 to the session a. session a is the iterator. serves as indexes of the arrays that stores the questions,answers etc...
   $_SESSION['a']++;
   
   //ridirect to exam.php if there are still number of items remaining.
   while($_SESSION['a']<=$_SESSION['num_of_questions'])
   {
      header("location:exam.php");
      
      exit();  //kill the script
   }
   
   echo 'exam finished!';
   echo '<br>';
   echo 'Your score is: ';
   echo $_SESSION["iCorrect"];
   
   //unset the session variables needed to be reset
   unset($_SESSION["iCorrect"]);
   unset($_SESSION["exam_id"]);
   unset($_SESSION["invitation_code"]);
   unset($_SESSION["a"]);
   unset($_SESSION["num_of_questions"]);
   unset($_SESSION["question"]);
   unset($_SESSION["op1"]);
   unset($_SESSION["op2"]);
   unset($_SESSION["op3"]);
   unset($_SESSION["op4"]);
   unset($_SESSION["answers"]);
   
?>

Since it appears my login system is broken i have been trying to fix it. The problem is that it isnt loggin people in. This is what im doing:

The user visits login.php
they enter their details and click login
the posted data gets sent to login_process.php via jQuery
login_process.php checks to see if the details are correct
if they are it sets a cookie called uid with their user id
if they clicked the remember me box then this cookie is set for a year
if not then it is set as a session cookie
login_process echos a success back to the jQuery in login.php
when jQuery gets this success status it redirects to login_success.php
the user should now be logged in.
to show a logged in user i echo their username by running a query on the cookie uid

but somewhere along the lines cookie uid isnt being set so the user is never logged in.

here is the code:(shortened)


$username = $_POST['user_name'];
    $password = asf_hash($_POST['password']);
    $remember_me = $_POST['remember_me'];
//check the values with a query then:

if($remember_me == 'yes' && !isset($_COOKIE['uid']))
                    {
                        setcookie('uid', $_SESSION['uid'], time()+(((60*60)*24)*365));
                    }
                    elseif($remember_me == 'no' && !isset($_COOKIE['uid']))
                    {
                        setcookie('uid', $_SESSION['uid'], 0);
                    }
                    else
                    {
                        setcookie('uid', '', time()-3600);
                    }


login_success just contains a like to go back to the page they were originally viewing.

and in my init script which is run when a page loads:


$user = new user;
$user->setup($_COOKIE['uid']); // this basically sets info like the username and such from a query run on the cookie.


so why isnt the cookie being set? any ideas? also any ideas on making this more secure if it isnt?

Thanks

Hi, I made a login/register system and it was working fine, but now I seem to have broken it and I'm scratching my head as to why. I think it's something to do with the $_SESSION array, the error happens from going from the login.php page to members.php, I log in successfully, but when I get to the members page it says "you must be logged in".

index.php has the form to login or a link to register.php to make an account
Code: [Select]
<?php session_start(); ?>
<html>
<head>
<title>Lincs Crusade | Login page.</title>
</head>
<body>
<form action="login.php" method="POST">
Username:
<input type="text" name="username"><br />
Password:
<input type="password" name="password"><br />
<input type="submit" value="Login">
</form>
<a href="register.php">Click here to register!</a>
</body>
</html>

The register.php page
Code: [Select]
<?php
session_start();
echo "<h2>Register</h2>";
$submit = $_POST['submit'];
$username = strip_tags($_POST['username']); 
$password = strip_tags($_POST['password']);
$repeatpassword = strip_tags($_POST['repeatpassword']);
$email = $_POST['email'];
$date = date("Y-m-d");

if ($submit) { 
if ($username&&$password&&$repeatpassword&&$email) {
if ($password==$repeatpassword) {
if (strlen($username)>65) { 
echo "Length of username is too long!"; 
} elseif (strlen($email)>100) { 
echo "Length of email is too long!";
} elseif (strlen($password)>65||strlen($password)<8) {
echo "Password must be between 8 and 65 characters long!"; 
} else {
include('functions.php'); 
echo "All fields were accepted! ";
$password = md5($password);
$repeatpassword = ($repeatpassword);
$email = md5($email);
connect(); 
mysql_query(" 
INSERT INTO users VALUES ('','$username','$password','$email','$date') 
") or die("Could not insert values into <em>users</em> table!");
mysql_query("
INSERT INTO stats VALUES ('$username',10,10,0,1)
") or die("Could not insert values into <em>stats</em> table!");
$_SESSION['username'] == $username;
die("You have been registered! Please return to <a href=\"index.php\">homepage</a> and login."); 
}
} else {
echo "Your passwords do not match!";
}
} else {
echo "Please fill in <em>all</em> fields!";
}
 
}
?>
<html>
<head>
<title>Lincs Crusade | Register an Account.</title>
</head>
<body>
<form action="register.php" method="POST">
<p>Your username:</p>
<p>Note: Do not use your real name.</p>
<input type="text" name="username" value="<?php echo $username ?>"/>=
<p>Choose a password:</p>

<input type="password" name="password" />
<p>Please repeat password:</p>
<input type="password" name="repeatpassword" />
<p>Your student email:</p>
<p>Note: This is only used for recovering a lost or forgotten password.</p>
<input type="text" name="email" /><br />
<input type="submit" value="Register" name="submit" />
<p>
Note: Your password and email are md5 encrypted. This means neither I (the author) or anyone else will be able to view your information<br />
in plain text. For example, your password or email will look something like this "534b44a19bf18d20b71ecc4eb77c572f" once it has been encrypted.
</p>
</form>
</body>
</html>

The login.php page that process the form data to access members.php page
Code: [Select]
<?php
session_start();
$username = $_POST['username'];
$password = $_POST['password'];
if ($username&&$password) {
include('functions.php');
connect();
$query = mysql_query("SELECT * FROM users WHERE username='$username'");
$numrow = mysql_num_rows($query); 
if ($numrow!=0) { 
while ($row = mysql_fetch_assoc($query)) {
$dbusername = $row['username'];
$dbpassword = $row['password'];
}
if ($username==$dbusername&&md5($password)==$dbpassword) { 
echo "You're in! - <a href=\"members.php\">Proceed to the members page</a>";
$_SESSION['username'] == $username; 
} else {
echo "Incorrect password!";
}
} else {
die ("That user doesn't exist,<a href=\"register.php\">please register an account</a>");
}
} else {
die("Please enter a username and password!");
} 
?>

The members.php page
Code: [Select]
<?php 
session_start();
?>
<html>
<head>
<title>Lincs Crusade | Members page.</title>
</head>
<body>
<?php
if ($_SESSION['username']) {
echo "Welcome," .$_SESSION['username']. "!<br />";
echo "<a href=\"stats.php\">View your stats.</a>";
} else {
die ("You must be logged in.");
}
?>
</body>
</html>

and this is what is in the functions.php file
Code: [Select]
<?php
function connect() {
    mysql_connect("localhost","root","password") or die ("Unable to connect");
mysql_select_db("database") or die ("Unable to find database");
}
?>

Thanks for your help.

Hi

What is the best way of handling a login system with sessions, I have read that you should never hold the password in a session, so what should you hold in the session in order to access a users data?

Hello:

I am using this tutorial to make a secure login system (if there is a "better" way, please let me know):

http://tinsology.net/2009/06/creating-a-secure-login-system-the-right-way/

I am having a problem with the login form - it keeps moving to the "a_Home.php" page (the one that is suppose to be password protected) without any login information being entered.

This is the mmLogin.php page:
Code: [Select]
<?php

include('../include/myConn.php');
include('include/myAdminCodeLib.php');

session_start();
$username = $_POST['username'];
$password = $_POST['password'];

$username = mysql_real_escape_string($username);
$query = "SELECT password, salt
        FROM users
        WHERE username = '$username';";
$result = mysql_query($query);
if(mysql_num_rows($result) < 1)
{
    header('Location: mmLogin.php');
    die();
}
$userData = mysql_fetch_array($result, MYSQL_ASSOC);
$hash = hash('sha256', $userData['salt'] . hash('sha256', $password) );
if($hash != $userData['password'])
{
    header('Location: mmLogin.php');
    die();
}
else
{
    validateUser();
    header('Location: a_Home.php');
}

?>

<html>

<head></head>

<body>
<form name="login" action="mmLogin.php" method="post">
    Username: <input type="text" name="username" />
    Password: <input type="password" name="password" />
    <input type="submit" value="Login" />
</form>
</body>

</html>


This is the a_Home.php page:
Code: [Select]
<?php

include('include/myAdminCodeLib.php');
include('include/myCheckLogin.php');

?>

<html>

<head></head>

<body>

<a href="mmLogin.php">Log Off</a>

</body>

</html>


This is the myCheckLogin.php page:
Code: [Select]
<?php
session_start();
if(!isLoggedIn())
{
    header('Location: mmLogin.php');
    die();
}
?>

This is the myAdminCodeLib.php page:
Code: [Select]
<?php

function validateUser()
{
    session_regenerate_id ();
    $_SESSION['valid'] = 1;
    $_SESSION['userid'] = $userid;
}

function isLoggedIn()
{
    if(isset($_SESSION['valid']) && $_SESSION['valid'])
        return true;
    return false;
}

function logout()
{
    $_SESSION = array();
    session_destroy();
}

?>


Can anyone tell me why this is not working?

And, am I calling the functions properly?

Thanks.

here is my part of the code which i am stuck on
<?php

$form = "<form action='login.php' method='post'>
<center>
<table>
<tr>
<td><input type='text' id='usernamebox' name='Username' value='Username' tabindex='1' class='textbox' onFocus='usernamebox_focus();' onBlur='usernamebox_blur();'></td>
    <td><a href='register.php'>Register</span></a></td>
</tr>
<tr>
<td><input type='password' id='passwordbox' name='Password' value='Password' tabindex='2' class='textbox' onFocus='passwordbox_focus();' onBlur='passwordbox_blur();'></td>
    <td><input type='submit' name='loginbutton' value='Login'></td>
</tr>
</table>
</center>
</form>";  ******(on the website the rest under thiss is missing)********

if ($_POST['loginbutton']){
$user = $_POST['username'];
$password = $_POST['password'];

if ($user && $password && $user != 'Username'){
require("Scripts/connect.php");
$password = md5($password);
$query = mysql_query("SELECT * FROM users WHERE username='$user' AND password='$password'");

$numrows = mysql_num_rows($query);

if ($numrows = 1){
$rows = mysql_fetch_assoc($query);
$dbuser = $rows['username'];

$_SESSION['user'] = $dbuser;
$_SESSION['id'] = $dbid;
echo "<a href='index.php'> You are now loged in Click here to go to our Homepage</a>";
}
else
echo '<center>You did not submit a correct username and/or password!</center>';
echo '$form';

}
else
echo '<center>You did not submit a correct username and/or password!</center>';
echo '$form';
}
else{
echo '$form';
}

?>

Hello everyone,

I'd like to make a small object oriented login system. The problem is that I'm not very good at oop and i have only written these scripts the procedural way.

So please, correct me if I'm wrong:

class database
- connect()
class user
- login()

My problem is when i make a database connection in connect(), I can't use it in login().

class Database{

public function connect(){
$mysqli = new mysqli('localhost','root','','login');
}
}

class User{

public function login(){
// how do i use connect() from above and make a query to log the user in?
}