Still giving this message: Wrong Username or Password

Israel

10y887PHP

Hi!

I do insert the username and password correctly. But I don't know why this message always appear: Wrong Username or Password

$host="localhost"; // Host name

$username="root"; // Mysql username

$password=""; // Mysql password

$db_name="test"; // Database name

$tbl_name="members"; // Table name

// Connect to server and select databse.

mysql_connect("$host", "$username", "$password")or die("cannot connect");

mysql_select_db("$db_name")or die("cannot select DB");

// username and password sent from form

$myusername=$_POST['$myusername'];

$mypassword=$_POST['$mypassword'];

// To protect MySQL injection (more detail about MySQL injection)

$myusername = stripslashes($myusername);

$mypassword = stripslashes($mypassword);

$myusername = mysql_real_escape_string($myusername);

$mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";

$result=mysql_query($sql);

// Mysql_num_row is counting table row

$count=mysql_num_rows($result);

// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){

// Register $myusername, $mypassword and redirect to file "login_success.php"

session_register("myusername");

session_register("mypassword");

header("location:login_success.php");

}

else {

echo "Wrong Username or Password";

}

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

Israel10y ago
See what I do its giving this:
! ) Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in C:\wamp\www\BestLogin\checklogin.php on line 10
( ! ) Notice: Undefined index: $myusername in C:\wamp\www\BestLogin\checklogin.php on line 14
( ! ) Notice: Undefined index: $mypassword in C:\wamp\www\BestLogin\checklogin.php on line 15
$host="localhost"; // Host name
$username="root"; // Mysql username
$password=""; // Mysql password
$db_name="test"; // Database name
$tbl_name="members"; // Table name
// Connect to server and select databse.
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");
// username and password sent from form
$myusername=$_POST['$myusername'];//number 14 it's here
$mypassword=$_POST['$mypassword'];//number 15 it's here
// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);
$sql="SELECT * FROM members WHERE username='$myusername' and password='$mypassword'"; //number 10 it's here
$result=mysql_query($sql);
// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row
if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
session_register("myusername");
session_register("mypassword");
header("location:login_success.php");
}
else {
echo "Wrong Username or Password";
}
?>
Manas Mohapatra10y ago
Remove $ symbol from your table name:

$sql="SELECT * FROM tbl_name WHERE username = '$myusername' and password = '$mypassword'";
$result=mysql_query($sql);

Secondly you are checking no records as 1. I am not sure duplicate data but just cross check if it returns 2 then it will execute else condition .