# PHP login, advise needed!

**URL:** <https://forum.kirupa.com/t/php-login-advise-needed/177036>\
**Category:** programming\
**Created:** [January 29, 2006, 6:33pm UTC](https://forum.kirupa.com/t/php-login-advise-needed/177036 "2006-01-29T18:33:27Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![red\_A](https://avatars.discourse-cdn.com/v4/letter/r/48db29/32.png) [@red\_A](https://forum.kirupa.com/u/red_A)\
**Post date:** [January 29, 2006, 6:33pm UTC](https://forum.kirupa.com/t/php-login-advise-needed/177036/1 "2006-01-29T18:33:27Z")

</div>

I recently purchase a book on PHP & mySQL, and needed to build a php & mysql based system, however, as i went along and did all the code, i kept getting errors, untill i started to modify it and have got it to work, however, i wanted to ask you expert PHP heads here, for your advise on my new code and the books original code, just a reassurance if you can.

----book code (DOES NOT WORK)----

```php

<?
if ((!$_POST[username]) || (!$_POST[password])) {
   header( "Location: http://127.0.0.1/show_login.html");
   exit;
}
$db_name = "testDB";
$table_name = "auth_users";
$connection = @mysql_connect("localhost", "spike", "9sj7En4")
or die(mysql_error());
$db = @mysql_select_db($db_name, $connection) ©Ú
die(mysql_error());
$sql = "SELECT * FROM $table_name WHERE username =
'$_POST[username]' AND password = password('$_POST[password]')";

$result = @mysql_query($sql,$connection) or die(mysql_error());
$num = mysql_num_rows($result);
if ($num != 0) {
   $msg = "<P>Congratulations, you're authorized!</p>";
} else {
   header("Location: http://127.0.0.1/show_login.html");
   exit;
}
?>
<HTML>
<HEAD>
<TITLE>Secret Area</TITLE>
</HEAD>
<BODY>
<? echo "$msg"; ?>
</BODY>
</HTML>

```

—my code (THIS WORKS)—

```php

<?
if ((!$_POST[username]) || (!$_POST[password])) {
   header( "Location: login.html");
   exit;
}
$connection = @mysql_connect("localhost", " ***", "*****")
or die(mysql_error());
$db = @mysql_select_db("dbme", $connection) or die(mysql_error());
$sql = "SELECT id FROM user WHERE name =
'$_POST[user]' AND password = '$_POST[password]'";

$result = @mysql_query($sql,$connection) or die(mysql_error());
$num = mysql_num_rows($result);
if ($num != 1) {
   $msg = "<P>Congratulations, you're authorized!</p>";
} else {
   header("Location: login.html");
   exit;
}
?>
<HTML>
<HEAD>
<TITLE>Secret Area</TITLE>
</HEAD>
<BODY>
<? echo "$msg"; ?>
</BODY>
</HTML>

```