Question

I’m trying to get my config.php file to work but everytime i use it with my login.php it just gives me a white page rather than continuing through my login.php file towards my members.php page. I put my connection info into my login.php script and it works properly listed below is what i been trying to do.

config.php

<?php 

$con = mysql_connect("mysql","DBUSER","DBPASS");
if (!$con)
{
die('Could not connect: ' . mysql_error());
}

mysql_select_db("DBNAME", $con);

/* WHAT I ORIGINALLY WANTED TO USE
$localhost = "mysql";
$dbuser = "DBUSER";
$dbpass = "DBPASS";
$dbname = "DBNAME";

$connect = mysql_connect($localhost, $dbuser, $dbpass);
mysql_select_db("$dbname", $connect); 
*/

?>

login.php

<?php
// I ALSO USED includes"config.php";
require("config.php");

$username = $_POST['username'];
$password = $_POST['password'];


$query = mysql_query("SELECT * FROM member WHERE username = '$username' AND password =       '$password'");
$data = mysql_fetch_assoc($query);

if(mysql_num_rows($query)){
session_start();
$_SESSION['username'] = $data['username'];
header("Location: members.php");
exit;
}

header("Location: index.php");

?>

I’m new to PHP so don’t laugh at my code please thanks for the help!

Answer 1

On top of your code turn on errors:

ini_set("display_errors","On");

and make sure you can see your mysql errors:

$query = mysql_query(...) or die("Error: ".mysql_error());

And one last thing: although mysql_* functions are being deprecated, if you use them always escape your data before you use it in your query; you can be victim of SQL injection.