login - php - Log In cannot detect mysqli_num_rows() but logs in anyway -


the code supposed echo specific things in html elements if log in successful

the problem this...once log in, shows page says "that user not exist or not yet activated, press back". when press "back" button on browser, shows me html elements supposed generate when log in successful.

"that user not exist or not yet activated, press back" supposed show when query turns out empty or not 1 @ least.

here code reference:

<?php include_once("check_login_status.php"); // initialize variables page might echo $e = ""; $joindate = ""; $lastsession = "";  // make sure _get email set, , sanitize if(isset($_get["em"])){     $e = $_get["em"];     // echo $e; } else {     header("location: http://www.yoursite.com"); } // select member users table $sql = "select * user email='$e' , active='1' limit 1"; $user_query = mysqli_query($db_connect, $sql); // make sure user exists in table $numrows = mysqli_num_rows($user_query); // echo $numrows; if( $numrows != 1 ){     echo "that user not exist or not yet activated, press back";     exit();  } // check see if viewer account owner $isowner = "no"; if($e == $log_email && $user_ok == true){     $isowner = "yes"; } // fetch user row query above while ($row = mysqli_fetch_array($user_query, mysqli_assoc)) {     $profile_id = $row["id"];     $signup = $row["signup"];     $lastlogin = $row["lastlogin"];      $joindate = strftime("%b %d, %y", strtotime($signup));     $lastsession = strftime("%b %d, %y", strtotime($lastlogin)); } ?> <!doctype html> <html> <head> <meta charset="utf-8"> <title><?php echo $u; ?></title> <link rel="icon" href="favicon.ico" type="image/x-icon"> <link rel="stylesheet" href="style.css"> <script src="main.js"></script> <script src="ajax.js"></script> </head> <body> <div id="pagemiddle">   <h3><?php echo $e; ?></h3>   <p>is viewer page owner, logged in , verified? <b><?php echo $isowner; ?></b></p>   <p>join date: <?php echo $joindate; ?></p>   <p>last session: <?php echo $lastsession; ?></p> </div> </body> </html>

i have made few echo tests , seems in separate test...

include_once("db_connect.php"); $e = "my email"; $sql = "select * user email='$e' , active='1' limit 1"; $user_query = mysqli_query($db_connect, $sql); // make sure user exists in table $numrows = mysqli_num_rows($user_query); echo $numrows;

numrows echos out '1' - whereas in main code, numrows echoes out ()...which quite weird since $_get["em"] same email when checked via echo.

which quite weird since ...

no, it's not wired, problem not there!

i don't see error error in php:

include_once("check_login_status.php");

or not db connected

$user_query = mysqli_query($db_connect, $sql);

enable error log in php.ini (see http://php.net/manual/it/errorfunc.configuration.php):

log_errors = on

and check error in apache (or else) web server logs.

or try not re-invent "hot water" , use done user management class:

sentry @ cartalyst


Comments

Post a Comment

Popular posts from this blog

basic authentication with http post params android -

i doing basic authentication passing username , password , using basicnamevaluepair sending post params response service. my method: public stringbuilder callservicehttppost(string username, string password, string type) { // create new httpclient , post header httpclient httpclient = new defaulthttpclient(); httppost httppost = new httppost(webservice + type); httpresponse response = null; stringbuilder total = new stringbuilder(); try { url url = new url(webservice + type); /*string base64encodedcredentials = base64.encodetostring((username + ":" + password).getbytes(), base64.url_safe | base64.no_wrap);*/ string base64encodedcredentials = "basic " + base64.encodetostring( (username + ":" + password).getbytes(), base64.no_wrap); httppost.setheader("auth...
Read more

vb.net - Virtual Keyboard commands -

i wondering difference between virtual these keyboard commands is: keyeventf_extendedkey , keyeventf_keyup is. everywhere have looked gives me description based off integers , not want know each of them does. you've tagged question vb.net, these have nothing @ vb.net. they're constants defined in windows header files, use win32 api functions. as far difference, can't tell looking @ values. individual values not particularly important, that's why named identifiers used. what's important used , documentation functions tells mean. the first one, keyeventf_extendedkey , used keybdinput structure (which used along e.g. sendinput function) pass information synthesized keyboard input. if flag used, means scan code should interpreted extended key. technically, means scan code preceded prefix byte value 224 (&he0 in hexadecimal notation). the second one, keyeventf_keyup , 1 of flags available use structure. means key being released (going up)...
Read more

c++ - End of file on pipe magic during open -

i have c++ application in starting process(wireshark) following. if (fp == null){ fp = popen(processpath, "r"); //processpath process want start if (!fp){ throw std::invalid_argument("cannot start process"); } fprintf(fp, d_msg);//d_msg input want provide process } else if(fp != null){ fprintf(fp, d_msg); } the problem when execute c++ application, start wireshark error end of file on pipe magic during open what should avoid that? also tried using mkfifo create named pipe , execute it. used this: if (fp == null){ system("mkfifo /tmp/mine.pcap"); fp = popen("wireshark -k -i /tmp/mine.pcap", "r"); if (!fp){ dout << "cannot start wireshark"<<std::endl; throw std::invalid_argument("cannot start wireshark"); } input = fopen("/tmp/mine.pcap", "wb"); fprintf(input , d_msg); fclose(input)...
Read more