PHP - Automatic Login After Input

Hello , I'm here with a problem facing with automatic login , I'm not able to login programmatically and fill the forms programatically to other website . here is the code which i have tried .   <?php

Hi,
I'm trying to auto login to a website(created by me ;-) ) using the curl. as I am new to this I don't know how to make this possible.

following is the code I tried but this is not submitting the data in the other site. the 'usr_name' and 'password' the field names in the page  "http://localhost/myproject/users/login". and I have given a print_r in that site and it is displaying

Array ( [loginType] => L [step] => confirmation [usr_name] => dasd@hotmail.com [password] => test123 )
but not submitting the form.

please help me....

this is the code i've tried..I got this from web...




$login = "http://localhost/myproject/users/login";
$param="loginType=L&step=confirmation&usr_name=dasd@hotmail.com&password=test123";
$c = curl_init();
curl_setopt($c, CURLOPT_URL, $login);

curl_setopt($c, CURLOPT_COOKIEJAR, "cookies.txt");
curl_setopt($c, CURLOPT_COOKIEFILE, "cookies.txt");
curl_setopt($c, CURLOPT_POST, 1);
curl_setopt($c, CURLOPT_POSTFIELDS, $param);
curl_setopt($c, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($c, CURLOPT_FOLLOWLOCATION, 1);
echo curl_exec($c);


thanks in advance....

Code: [Select]
<?php
ob_start();
session_start();

require_once ("functions.php");

$returnurl = urlencode(isset($_GET["returnurl"])?$_GET["returnurl"]:"");
if($returnurl == "")
$returnurl = urlencode(isset($_POST["returnurl"])?$_POST["returnurl"]:"");

$do = isset($_GET["do"])?$_GET["do"]:"";

$do = strtolower($do);

switch($do)
{
case "":
if (checkLoggedin())
{include("usernav.php");?>
<h3>User Logged In</h3>
<p>This is the members only area.</p>
<?php } else {?>

<a name="User Panel"></a>
<h1>User Panel</h1>
<h3>User Login</h3>
<form name="login" action="login.php?do=login" method="POST" onsubmit="return aValidator();">
<input type="hidden" name="returnurl" value="<?$returnurl?>">
<table cellPadding=3 width=225 border=1>
<tr>
<td colSpan=2>
<center>
<p><b>Members-Only Area!</b></font></p>
</center></td></tr>
<tr>
<td align=center width=70>Username:</td>
<td><input type="text" name="username"></td></tr>
<tr>
<td align=center width=70>Password:</td>
<td><input type="password" name="password"></font></td></tr>
<tr>
<td align=middle colspan=2>
<input type="submit" name="submit" value="Login"></td></tr>
<td align=middle colSpan=2>
<input type="checkbox" name="remme" value="on">&nbsp;Remember me for the next time I visit</td>
</form></table></td>
<?php
}
break;
case "login":
$username = isset($_POST["username"])?$_POST["username"]:"";
$password = isset($_POST["password"])?$_POST["password"]:"";

if ($username=="" or $password=="" )
{
echo "<h1>Username or password is blank</h1>";//this does not show when the input(s) are blank
clearsessionscookies();
header("location: index.php?returnurl=$returnurl");
}
else
{
if(confirmuser($username,$password))
{
createsessions($username,$password);
if ($returnurl<>"")
header("location: $returnurl");
else
{
header("Location: index.php");
}
}
else
{
echo "<h1>Invalid Username and/Or password</h1>";//this message does not show when the user login invalid
clearsessionscookies();
header("location: index.php?returnurl=$returnurl");
}
}
break;
case "logout":
clearsessionscookies();
header("location: index.php");
break;
}
?>
What maybe the case, could anyone help me with this?
Thanks Ted.

I have this function completely written in my class file that I am working on.  The point to this function is to be able to check the login of a user or administrator for either of the control panels associated with my site.

It will check the session intime as well as the page / module referenced.  Once it passes all those checks, it will check and ensure the emailaddress/password stored in the current session still holds true and the account is still active...  if the account is still active it will update the lastActivity as well as update all of the session variables with what is currently in the database.

What I am looking for is basically a look at the function, see if it looks good..  If there is any part to it that could create security holes for the site just off the login function itself...

Usage: $q->validUser($_SESSION['user'], $_mod);

<?php
 function validUser($sess, $p) {

if ($sess['inTime'] == '' && $p != 'login' && $p != 'logout') {
session_destroy();
$login = '0';
$_int = '';
return $login;
} else if ($sess['inTime'] < time()-3600 && $p != 'login') {
$sess['inTime'] = '';
session_destroy();
$this->check_login($sess, $p);
} else {
$this->user = $sess['emailAddress'];
$this->pass = $sess['password'];

$login = $this->sql_query("SELECT * FROM users WHERE emailAddress = '".$this->user."' AND password = '".$this->pass."' 
   AND status = '1' LIMIT '1'");
if ($login = $this->sql_numrows($login) < 1) {
$sess['inTime'] == '';
session_destroy();
$login = '0';
} else {
// logged in, lets update the database for last_activity AND the session.

$this->sql_query("UDATE users SET lastActivity = '".now()."' WHERE
  emailAddress = '".$this->user."'");
$login = $this->sql_query("SELECT * FROM users WHERE emailAddress = '".$this->user."' AND password = '".$this->pass."' 
       AND status = '1' LIMIT '1'");
$login = mysql_fetch_assoc($login);
foreach ($login as $key => $value)
{ 
$sess[$key] = $value;
}
$sess['inTime'] = time();
$login = '1';
}
return $login;
}
}

?>

That is the main function, sql_query and sql_numrows is:

<?php
function sql_query($query = "", $transaction = FALSE) {
unset($this->query_result);

if ($query != "") {
$this->num_queries++;
if ($transation == BEGIN_TRANSACTION && !$this->in_transation) {
$result = mysql_query("BEGIN", $this->db_connect_id);
if (!$result) {
return false;
}
$this->in_transaction = TRUE;
}

$this->query_result = mysql_query($query, $this->db_connect_id);
} else {
if ($transaction == END_TRANSACTION && $this->in_transaction ) {
$result = mysql_query("COMMIT", $this->db_connect_id);
}
}
if ($this->query_result) {
unset($this->row[$this->query_result]);
unset($this->rowset[$this->query_result]);

if ($transaction == END_TRANSACTION && $this->in_transaction ) {
$this->in_transaction = FALSE;
if (!mysql_query("COMMIT", $this->db_connect_id)) {
mysql_query("ROLLBACK", $this->db_connect_id);
return false;
}
}
return $this->query_result;
} else {
if ($this->in_transaction ) {
mysql_query("ROLLBACK", $this->db_connect_id);
$this->in_transaction = FALSE;
}
return false;
}
}

function sql_numrows($query_id = 0) {
if(!$query_id) {
$query_id = $this->query_result;
}
return ($query_id) ? mysql_num_rows($query_id) : false;
} ?>

Any insight that can help to benefit these functions would be appreciated.

hi

i need help an idea how can i separate members from admins
since i dont know how to create login form i used tutorial ( http://www.youtube.com/watch?v=4oSCuEtxRK8 )   (its session login form only that i made it work other tutorials wre too old or something)
how what i want to do is separate members and admins because admin need more rights to do
now i have idea but dont know will it work like that
what i want to do is create additional row in table named it flag and create 0 (inactive user) 1 (member) 2 (admin) will that work?
and how can i create different navigation bars for users and admins? do you recommend that i use different folders to create it or just script based on session and flag?