i cant seem to get this thing to login users can somone please help me out
here is how my database tables are well the important part for login
mem_id , mem_name, mem_pass,
and here is the code below i HOPE somone can show me what i did wrong
<?
include "config.php";
?>
<HTML>
<head>
<title>Member Login</title>
</head>
<body bgcolor="#000000" text="#FFFFFF">
<form action="<? echo $PHP_SELF; ?>?cbk=login" method="post">
<center><table border="0" cellspacing="1" cellpadding="3" bgcolor="black" width="300">
<tr>
<td align="center" bgcolor="#777777" colspan="2"><b><font size="2" color="#ffffff">Member Login</font></b></td>
</tr>
<tr bgcolor="#555555">
<td><b><font size="2" color="#FFFFFF">Name:</font></b></td>
<td> <select name="username" style="background-color: #555555; font-family: verdana, arial, helvetica; color: white; font-size: 10; border: 1 solid #000000">
<?
$db = mysql_connect("$dbhost","$dbuser","$dbpass");
mysql_select_db("$dbname", $db);
$sql = "SELECT mem_id,mem_name FROM cs_validation";
$result = mysql_query($sql, $db);
if (! $result)
{
echo "An error has occurred!!";
exit();
}
$num_rows = mysql_num_rows($result);
for ($i = 1; $i <= $num_rows; $i++)
{
$row = mysql_fetch_row($result);
echo("<option value='$row[0]'");
echo(">$row[1]</option>");
}
?>
</select></td>
</tr>
<tr bgcolor="#555555">
<td><b><font size="2" color="#FFFFFF">Password:</font></b></td>
<td> <input type="password" name="password" style="background-color: #555555; font-family: verdana, arial, helvetica; color: white; font-size: 10; border: 1 solid #000000"></td>
</tr>
<tr bgcolor="#555555">
<td align="center" colspan="2"><input type="submit" value="Login" style="background-color: #000000; font-family: verdana, arial, helvetica; color: white;"></td>
</tr>
</table></form></center>
<?
if($cbk == "login")
$db = mysql_connect("$dbhost","$dbuser","$dbpass");
mysql_select_db("$dbname", $db);
if (($username) AND ($password)) {
$query = "SELECT mem_id,mem_pass FROM cs_validation";
$query .= "WHERE mem_id='$username' AND mem_pass='$password'";
$result = mysql_query($query, $db);
if(mysql_num_rows($result)) {
// we have at least one result, so update the logged in datetime
$query = "UPDATE from cs_validation SET logged=SYSDATE()";
$query .= "WHERE mem_id='$username' AND mem_pass='$password'";
mysql_query($query, $db);
} else {
print("Sorry, this login is invalid.");
exit;
}
}
?>
</BODY>
</HTML>
and this is the code i use to make the tables
$query = "CREATE TABLE cs_validation (
mem_id int(20) NOT NULL auto_increment,
mem_name varchar(50) NOT NULL,
mem_pass varchar(7) NOT NULL,
mem_age varchar(10) NOT NULL,
mem_gender varchar(10) NOT NULL,
mem_email varchar(50) NOT NULL,
mem_favgun varchar(50) NOT NULL,
mem_favmission varchar(50) NOT NULL,
mem_rank varchar(10) NOT NULL,
mem_points varchar(250) NOT NULL,
mem_description varchar(250) NOT NULL,
PRIMARY KEY (mem_id)
)";
mysql_query($query);
$error = mysql_error();
errorcheck($error,$query,$ferror);