PHP - Advanced Login Validation Help

Hi my code below checks for Username and password from a form and if they match those in database, it redirects to main.php However, I would like some help setting up error page?!
at the moment if the username or password are incorrect and teh form is submitted, the pages just goes white and blank?!

<?php
session_start();
include_once("config.php");
checkLoggedIn("no");
if(isset($_POST["submit"])) {

field_validator("rsUser", $_POST["rsUser"], "alphanumeric", 3, 15);

// password must be between 4 and 15 chars - any characters can be used:

field_validator("rsPass", $_POST["rsPass"], "string", 3, 15);

if($messages){

doIndex();

exit;

}
 if( !($row = checkPass($_POST["rsUser"], $_POST["rsPass"])) ) {

        $messages[]="Incorrect login/password, try again";
    }

if($messages){

doIndex();

exit;

}

cleanMemberSession($row["rsUser"], $row["rsPass"], $row["UserID"]);

if ($user = checkPass($_REQUEST['rsUser'], $_REQUEST['rsPass'])) {
  cleanMemberSession($user['rsUser'], $user['rsPass'], $user['UserID']);
} else {
  echo('Login failed');
}  

header("Location: main.php");
} else {

doIndex();
}
function doIndex() {

global $messages;

global $title;
}
?>


Login failed does not get shown if a username is entered wrong?!

Hi there, I am using the jQuery, Ajax PHP code which is given at http://roshanbh.com.np/2008/04/ajax-login-validation-php-jquery.html

The form I am using, which is in index.html, is:
Code: [Select]
<form method="post" action="" name="login" id="login_form">
                    <div class="field_row">
                        <div class="label_container">
            <label>Email</label>                       
                        </div>
                        <div class="field_container">
            <input type="text" placeholder="login with your email address..." name="email_address" id="email_address" value="" class="large" />                       
                        </div>
        <div class="clear"><span class="nodisp">&nbsp;</span></div>
        </div>

        <div class="field_row">
            <div class="label_container">
            <label>Password</label>         
            </div>
            <div class="field_container">
            <input type="password" placeholder="...and password" name="password" id="password" value="" class="large" />         
            </div>
        <div class="clear"><span class="nodisp">&nbsp;</span></div>
        </div>
               
                    <div class="final_row">
                        <input type="image" src="images/login_blue.gif" id="user_login_button" name="user_login_button" value="login" id="submit" class="submit_button" />
                        <div class="final_row_text_container" >
<a href="/login/forgot_password" style="color: #008ee8;" class="small_text">Forgot your Password?</a>
                        <br />
<span id="msgbox" style="display:none"></span>
</div>
                    </div>
<div class="clear"><span class="nodisp">&nbsp;</span></div>

                </form>

The Javascript, which is situated in the head of index.html. is:
Code: [Select]
<script language="javascript">
$(document).ready(function()
{
$("#login_form").submit(function()
{
//remove all the class add the messagebox classes and start fading
$("#msgbox").removeClass().addClass('messagebox').text('Validating....').fadeIn(1000);
//check the email address exists or not from ajax
$.post("login_ajax.php",{ email_address:$('#email_address').val(),password:$('#password').val(),rand:Math.random() } ,function(data)
        {
  if(data=='yes') //if correct login detail
  {
  $("#msgbox").fadeTo(200,0.1,function()  //start fading the messagebox
{
  //add message and change the class of the box and start fading
  $(this).html('Logging in.....').addClass('messageboxok').fadeTo(900,1,
              function()
  {
  //redirect to secure page
document.location='secure.php';
  });
 
});
  }
  else
  {
  $("#msgbox").fadeTo(200,0.1,function() //start fading the messagebox
{
  //add message and change the class of the box and start fading
  $(this).html('Your login details are incorrect.').addClass('messageboxerror').fadeTo(900,1);
});
          }

        });
  return false; //not to post the  form physically
});
//now call the ajax also focus move from
$("#password").blur(function()
{
$("#login_form").trigger('submit');
});
});
</script>

And the PHP, in login_ajax.php, is:

<?php session_start();

$host =  "localhost";
$user = "bford";
$pass = "bford";
$db = "bford";

$link = mysql_connect($host, $user, $pass);
if (!link) 
{
die('<strong>Error(s) occured:</strong> Could not connect: ' . mysql_error());
}

$db_selected = mysql_select_db($db, $link);
if (!db_selected) 
{
die ('<strong>Error(s) occured:</strong> Cant use bford: ' . mysql_error());
}

//get the posted values
$email_address=$_GET['emailaddress'];
$pass=$_GET['password'];

//now validating the username and password
$sql="SELECT * FROM users WHERE email_address='".$email_address."'";
$result=mysql_query($sql);
$row=mysql_fetch_array($result);

//if username exists
if(mysql_num_rows($result)>0)
{
//compare the password
if($row["password"],$pass)==1
{
echo "yes";
//now set the session from here if needed
$_SESSION["user_name"]=$userID; 
}
else
echo "no"; 
}
else
echo "no"; //Invalid Login


?>


I have been working on this for days now, changing around the form names, database table names, php variables, allsorts! I still cannot get it functioning properly. When I input a correct email_address and password combination, the 'Your login details are incorrect.' message still appears.

Help would be much appreciated.

Ben.

Dear all,

Please help me.
I have two sites and both run on separate DB, both have separate signup and login process, Now i want if any user login from any site can access both sites. There are separate session for both sites now i want to use any of the session for user authentication. Please give suggestions.

Thanks,

Hey guys, at the moment I am trying to do an advanced search on events, 4 fields - county, date, title and hoster, so I am not really sure how to go about this but either way I started writing a script to do this, you learn from trying and mistaken right?

Now I made sure the radio buttons all worked before I tryed this, checking the values of them on the form (seperate page) and if they get transferred correctly over to this page, basically for every field there are 2 radio boxes yes and No, which means for them to be included in the search or not, this is the code I have so far and if no radio buttons are selected and the fields are empty it comes up with the table and no results, when everything is set to no the page is blank, when everything is set to yes and I put the correct information in the fields then it comes up with the right data, so far it basically only works if all is yes (I will change it to LIKE later so they don't have to put in the exact information for certain fields) so I guess I am on the right way? Where and what am I doing wrong?

Code: [Select]
<?php
session_start();

include 'connect.php';

$username = $_SESSION['username'];

if(!isset($_SESSION['username']))
{
echo '<div align="center">';
      echo 'You have to be a registered member to be able to view events.<br><br> <a href="register.html">Click here to register</a>';
              echo '<br><br><br><br>Or if you are already a member, please login to use this area.<br>';
        echo '
        <form method="POST" action="loginverification.php">
        <table border="0">
        <tr><td>
  Username: </td><td><input type="text" name="username" size="15" /></td></tr>
  <tr><td>Password:</td><td> <input type="password" name="password" size="15" /></td></tr>
  </table>
  <div align="center">
    <p><input type="submit" value="Login" /></p>
  </div>
</form>';
      echo '</div>';
}
else{
$theDate = isset($_REQUEST["date1"]) ? $_REQUEST["date1"] : "";
$eventcounty = $_POST['county'];
$eventdescriptionheader = $_POST['eventdescriptionheader'];
$hoster = $_POST['hoster'];


if($_POST['searchcounty'] == "No") {


$result = mysql_query("SELECT * FROM Events WHERE eventdate = '$theDate' AND eventdescriptionheader = '$eventdescriptionheader' AND hoster = '$hoster' ORDER BY eventdate ASC")or die(mysql_error());
}

elseif($_POST['searchdate'] == "No") {

$result = mysql_query("SELECT * FROM Events WHERE eventcounty = '$eventcounty' AND eventdescriptionheader = '$eventdescriptionheader' AND hoster = '$hoster' ORDER BY eventdate ASC")or die(mysql_error());
}


elseif($_POST['searchtitle'] == "No") {


$result = mysql_query("SELECT * FROM Events WHERE eventcounty = '$eventcounty' AND eventdate = '$theDate' AND hoster = '$hoster' ORDER BY eventdate ASC")or die(mysql_error());
}

elseif($_POST['searchhoster'] == "No") {


$result = mysql_query("SELECT * FROM Events WHERE eventcounty = '$eventcounty' AND eventdate = '$theDate' AND eventdescriptionheader = '$eventdescriptionheader' ORDER BY eventdate ASC")or die(mysql_error());
}
else {
$result = mysql_query("SELECT * FROM Events WHERE eventcounty = '$eventcounty' AND eventdate = '$theDate' AND hoster = '$hoster' AND eventdescriptionheader = '$eventdescriptionheader' ORDER BY eventdate ASC")or die(mysql_error());
echo '<br>';
echo "<table border='0'>
<tr>
<th>Date/Time</th>
<th>Event</th>
<th>Participants</th>
<th>Hoster</th>
</tr>";



while($row = mysql_fetch_array($result))
{

 echo "<tr>";
 echo "<td>";
print date('d M Y', strtotime($row['eventdate']));
echo " ";
echo $row['starttime'] . "</td>";
       echo '<td><a href="showevent.php?eventsID=';
       echo $row['eventsID'];
       echo '">';
       echo $row['eventdescriptionheader'];
       echo "</a></td>";
         echo "<td>" . $row['currentparticipants'] . "/" . $row['maxparticipants'] .  "</td>";
         echo "<td>" . $row['hoster'] . "</td>";
         echo "</tr>";
}
echo '</table>';

$check = mysql_num_rows($result);

if ($theDate == "0000-00-00") {
    echo 'You did not select a date.';
    echo '<INPUT TYPE="button" VALUE="Back" onClick="history.go(-1);return true;">';
}

elseif ($check == 0) {
echo 'No results found.';
echo '<INPUT TYPE="button" VALUE="Back" onClick="history.go(-1);return true;">';
}

echo '<br><INPUT TYPE="button" VALUE="Back" onClick="history.go(-1);return true;"> ';



}




}




?>

Good morning,

I'm creating a content management system for my game. It's RPG style, so it contains many tasks, however, adding them is a bit complicated process and the system isn't simple. Therefore, simple web form is needed, but there are fields that depend on others. For instance, if quest type is k (which means killing task), a field asking how many different kinds of monsters need to be killed, then there should appear x fields with more specific information. To sum up, i need an example, advice or sth that would help me to create this type of html where new fields appear automatically depending on the chosen ones.

Thanks in advance,
Karolis