Jeg har nu kigget det hele i gemmen. der er kun den ene fejl det er jeg slet ikke kan logge ind.
index.php
Kode: Vælg alt
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
<link href="css/main.css" rel="stylesheet" />
<script src="script_database/jquery-1.8.3.js" type="text/javascript"></script>
<script src="script_database/selector.js" type="text/javascript"></script>
</head>
<body>
<?php
include 'int.php';
?>
<div id="wrapper">
<header id="top_header">
<h1>ISDK</h1>
</header>
<nav id="top_menu">
<ul>
<li>
<a href="index.php">Forside</a>
</li>
<li>
<a href="index.php">Om os</a>
</li>
<li>
<a href="index.php">Youtube</a>
</li>
</ul>
</nav>
<section id="main_section">
<article>
<?php
if(isset($_SESSION['user_id'])) {
echo 'du er logget ind';
} else {
echo 'du er ikke loggget ind';
}
?>
</article>
</section>
<aside id="side_news">
<h4>Nyheder</h4>
<form action="login.php" method="post"><p>Brugernavn</p>
<input type="text" name="username" placeholder="brugernavn" id="username" /><p>Kodeord</p>
<input type="password" name="password" placeholder="Kodeord" id="password" />
<p><input type="submit" value="login"/></p>
</form>
</aside>
<footer id="the_footer">
©copyright dragoneggcraft.dk 2012
</footer>
</div>
</body>
</html>
Kode: Vælg alt
<?php
session_start();
error_reporting(0);
require 'script_database/connect.php';
require 'script_database/general.php';
require 'script_database/users.php';
?>Kode: Vælg alt
<?php
mysql_connect('localhost', 'Den må du ikke se', 'Ikke noget for dig') or die(mysql_error());
mysql_select_db('user');
?>Kode: Vælg alt
<?php
function logged_in() {
return (isset($_SESSION['user_id'])) ? true : false;
}
function user_exists($username) {
$username = sanitize($username);
return (mysql_result(mysql_query("SELECT COUNT(`user_id`) FROM `users` WHERE `username` = '$username'"), 0) == 1) ? true : false;
}
function user_active($username) {
$username = sanitize($username);
return (mysql_result(mysql_query("SELECT COUNT(`user_id`) FROM `users` WHERE `username` = '$username' AND `active` = '1'"), 0) == 1) ? true : false;
}
function user_id_from_username() {
$username = sanitize('username');
return mysql_result(mysql_query("SELECT `user_id` FROM `users` WHERE `username` = '$username'"), 0, 'user_id');
}
function login($username, $password) {
$user_id = user_id_from_username($username);
$username = sanitize($username);
$password = md5($password);
return (mysql_result(mysql_query("SELECT COUNT (`user_id`) FROM `users` WHERE `username` = '$username' AND `password` = `$password`"), 0) == 1) ? $user_id : false;
}
?>Kode: Vælg alt
<?php
function sanitize($data) {
return mysql_real_escape_string($data);
}
function output_errors($errors) {
$output = array();
foreach($errors as $error) {
$output[] = '<li>' . $error . '</li>';
}
return '<ul>' . implode('', $output) . '</ul>';
}
?>Kode: Vælg alt
<?php
include 'int.php';
if(empty($_POST) === false) {
$username = $_POST['username'];
$password = $_POST['password'];
if(empty($username) === true || empty($password) === true) {
$errors[] = 'Du mangler at skrive dit kodeord og brugernavn';
} else if (user_exists($username) === false) {
$errors[] = 'Vi kan ikke finde dit brugernavn i vores database, er du registreret?.';
} else if (user_active($username) === false) {
$errors[] = 'Du har ikke aktiveret din bruger';
} else {
if (strlen($password) > 32) {
$errors[] = 'Kodeord er for langt';
}
$login = login($username, $password);
if ($login === false) {
$errors[] = 'Det brugernavn / password kombination er forkert';
} else {
$_SESSION['user_id'] = $login;
header('Location: index.php');
exit();
}
}
echo output_errors($errors);
}
?>Kode: Vælg alt
<?php
session_start();
session_destroy();
header('Location: index.php');
?>
