I have this script to log someone in using cookies:
<?php
require("../_cookie.php");
$name = $_POST["name"];
$password = $_POST['password'];
//Connect;
$con = mysql_connect("localhost:Database","savagew_savagew","...");
if (!$con){
die('Could not connect: ' . mysql_error());
}
//Select the db;
mysql_select_db("savagew_Database", $con);
$result = mysql_query("SELECT * FROM Users WHERE Name = '$name'");
//Store in arrays;
while($row = mysql_fetch_array($result)){
if(---($password) == $row['Password']){
$loginSuccess = true;
}else{
$fail[] = "Error 1: Wrong Password";
};
};
if($loginSuccess){//time()+(60*60*24*7)
setcookie("username", $name, 500000000000000, "/");
setcookie("password", ---($password), 500000000000000000000, "/");
};
$i = 0;
$failMessage = "Errors:";
while(true){
if($fail[$i] == null){
break;
};
$failMessage .= "+".$fail[$i];
$i ++;
};
if($failMessage == "Errors:"){
header('Location: '.$_SERVER["HTTP_REFERER"]);
}else{
passToJS("from", $_SERVER["HTTP_REFERER"]);
passToJS("fail", $failMessage);
};
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<?php require("../_head.php")?>
<title>[LOGIN]</title>
</head>
<body>
<script language="JavaScript">
if(fail != "Errors:"){
fail = fail.split("+");
totalFail = ""
for(var i in fail){
totalFail += "\n" + fail[i];
};
alert(totalFail);
};
if(from == ""){
window.location = "http://www.wolfthatissavage.com/home.php";
}else{
window.location = from;
};
</script>
</body>
</html>
And this to load data:
<?php
$forbid = false;
//Connect;
$con = mysql_connect("localhost:Database","savagew_savagew","...");
if (!$con){
die('Could not connect: ' . mysql_error());
};
//Select the db;
mysql_select_db("savagew_Database", $con);
$userName = $_COOKIE["username"];
$password = $_COOKIE["password"];
echo $userName."!!";
$result = mysql_query("SELECT * FROM Users WHERE Name = '$userName'");
while($row = mysql_fetch_array($result)){
if($password == $row['Password']){
$loginSuccess = true;
}else{
$forbid = true;
};
};
if(isset($_COOKIE["username"]) && !$forbid){
$loggedIn = true;
$result = mysql_query("SELECT * FROM Users WHERE Name = '$userName'");
//Store in arrays;
while($row = mysql_fetch_array($result)){
$userID = $row['ID'];
$userisMod = $row['isMod'];
$userisAdmin = $row['isAdmin'];
$userisBot = $row['isBot'];
};
}else{
$loggedIn = false;
};
?>
Unfortunately, the username cannot be retrieved by it, returning $userName as null.
