Question

I am trying to create logins for users. I have an sql that inserts the information in a mysql database, but after that i don’t know how to actually start the login. As of now, I insert the information on join_action.php which then redirects to /index.php (below). Does session_start() on /index.php actually start the login? Becuase if so, it’s not working.

PHP (join_action.php):

$sql=mysql_query("INSERT INTO users VALUES ('','$name','$password','$email','$date','$time','$random','0','1','0')");
            $id=mysql_insert_id();
            $_SESSION['id'] = $id;



            header("Location: http://localhost/index.php");

HTML (index.php top):

 <?php session_start(); ?>

Answer 1

login.php (untested, but should give you the right idea)

<?
   @session_start();
   if(isset($_POST['login'])){
    $name = addslashes({$_POST['login']});
    $password = addslashes({$_POST['password']});
    $res=mysql_query("SELECT * FROM users WHERE name = '{$name}' AND password = '{$password}'");

    if(mysql_num_rows($res)>0) {
      $_SESSION['loggedin'] = 1;
      $_SESSION['user'] = mysql_fetch_assoc($res);
     } else {
      $_SESSION['loggedin'] = 0;
      $_SESSION['user'] = null;
     }
    }

    if($_SESSION['loggedin']==1) {
?>
    Logged in! 
    <pre><? print_r($_SESSION['user]); ?></pre>
<? } else { ?>
    Not logged in...<br>
    <form method='post' action='login.php'>
    <div>Login: <input type='text' name='login'></div>
    <div>Password: <input type='password' name='password'></div>
    <input type='submit' value='Log In'>
    </form>
<? } ?>