php

good thinking... lol umm this is what i get when i try to login to my advertisement manager thingie..

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/a5245987/public_html/phpadmentor/admin/inclogin.php on line 45




---------------------------this is what is on line 45

/**
* Your database information
**/
if (isset($down_one)){
include ('../database/mysql.php');
}elseif (isset($down_two)){
include ('../../database/mysql.php');
}else{
include ('database/mysql.php');
}
 
Heres the total code.
<?

$g_sUser_Name = "";
$g_fUser_Admin = false;
$g_sUser_Fullname = "";
$g_sUser_FldAuto = 0;

function DBUserCheck2( $SessionId )
{
global $g_sUser_Name,$g_sUser_Password,$g_fUser_Admin,$g_sUser_Fullname, $g_sUser_FldAuto;

mysql_query("DELETE FROM admin_session WHERE UNIX_TIMESTAMP(NOW())-UNIX_TIMESTAMP(lastused) > 43200");

$sSQL = "select * from admin_session where sessionid='$SessionId' ";
$oRS = mysql_query($sSQL);
if ( ! ($row = mysql_fetch_array($oRS)) )
{
LoginForm();
exit();
}
$fldAuto = $row["sessiondata"];
$sSQL = "select * from user where fldAuto='$fldAuto' ";
$oRS = mysql_query($sSQL);
if ( ! ($row = mysql_fetch_array($oRS)) )
{
LoginForm();
exit();
}
$g_sUser_Name = $username;
if ( $row["admin"] == 1 )
$g_fUser_Admin = true;
$g_sUser_Fullname = $row["fullname"];
$g_sUser_FldAuto = $row["fldAuto"];
}


//User management
function DBUserCheck( $username, $password )
{
global $g_sUser_Name,$g_sUser_Password,$g_fUser_Admin,$g_sUser_Fullname, $g_sUser_FldAuto, $g_fUser_Admin;
mysql_query("DELETE FROM admin_session WHERE UNIX_TIMESTAMP(NOW())-UNIX_TIMESTAMP(lastused) > 43200");

$sSQL = "select * from user where name='$username' ";
$sSQL = $sSQL . " and pwd='$password'";
$oRS = mysql_query($sSQL);
if ( ! ($row = mysql_fetch_array($oRS)) )
{
LoginForm();
exit();
}
$g_sUser_Name = $username;
if ( $row["admin"] == 1 )
$g_fUser_Admin = true;
$g_sUser_Fullname = $row["fullname"];
$g_sUser_FldAuto = $row["fldAuto"];
}

function LoginForm()
{
global $sContent, $sHeader;

$sContent = $sContent. "<b>Login:</b><p>\n";
$sContent = $sContent. "<form action=index.php method=post><input type=hidden name=action value=login>\n";
$sContent = $sContent. "Username: <input type=text name=loginusername size=20><p>\n";
$sContent = $sContent. "Password: <input type=password name=loginuserpassword size=20><p>\n";
$sContent = $sContent. "<input type=submit value=Submit></form><p>\n";
PhpAdMentor_WriteContent( $sHeader, $sContent );
exit();
}

?>
 
pcmxkeith said:
$sSQL = "select * from user where name='$username' ";
$sSQL = $sSQL . " and pwd='$password'";
$oRS = mysql_query($sSQL);
if ( ! ($row = mysql_fetch_array($oRS)) )

im getting the exact same problem but no one replies.

anyway, u could try putting your $sSQL statement all in one :

$sSQL = "select * from user where name='$username' AND pwd='$password' ";
 
Back
Top Bottom