Original MySQL API

    Introduzione

    This extension is deprecated as of PHP 5.5.0, and has been removed as of PHP 7.0.0. Instead, either the mysqli or PDO_MySQL extension should be used. See also the MySQL API Overview for further help while choosing a MySQL API.

    These functions allow you to access MySQL database servers. More information about MySQL can be found at » http://www.mysql.com/.

    Documentation for MySQL can be found at » http://dev.mysql.com/doc/.

    Found A Problem?

    Learn How To Improve This Page • Submit a Pull Request • Report a Bug
    ＋add a note

    User Contributed Notes 1 note

    up
    0
    taegmyial at gmail dot com
    3 days ago
    <?php
// 1. Session start must always be at the very top
session_start();

$servername = "localhost";
$username = "root";
$password = "";
$dbname = "my_db";

// Database connection (MySQLi)
$conn = new mysqli($servername, $username, $password, $dbname);

// If the form was submitted
if ($_SERVER["REQUEST_METHOD"] == "POST") {

    $user = $_POST['username'];
    $pass = $_POST['password'];

    // 2. Find the user in the database by username
    // (Prepared Statements should be used here for security, see Topic 24)
    $sql = "SELECT id, password_hash FROM users WHERE username = '$user'";
    $result = $conn->query($sql);

    if ($result->num_rows > 0) {
        $row = $result->fetch_assoc();

        // 3. Verify the password using password_verify
        if (password_verify($pass, $row['password_hash'])) {

            // Password is correct -> Save user data into Session
            $_SESSION["loggedin"] = true;
            $_SESSION["userid"] = $row["id"];
            $_SESSION["username"] = $user;

            echo "Welcome, you are logged in!";
        } else {
            echo "Incorrect password.";
        }
    } else {
        echo "User does not exist.";
    }
}
?>
    ＋add a note
    To Top