diff --git a/site/login/login/login-exec.php b/site/login/login/login-exec.php index 9b628813..31783557 100644 --- a/site/login/login/login-exec.php +++ b/site/login/login/login-exec.php @@ -38,11 +38,11 @@ //Input Validations if($login == '') { - $errmsg_arr[] = 'Login ID missing'; + $errmsg_arr[] = 'Login ID is missing'; $errflag = true; } if($password == '') { - $errmsg_arr[] = 'Password missing'; + $errmsg_arr[] = 'Password is missing'; $errflag = true; } diff --git a/site/login/login/mysql.sql b/site/login/login/mysql.sql index 9f93447f..a4cd63ab 100644 --- a/site/login/login/mysql.sql +++ b/site/login/login/mysql.sql @@ -2,19 +2,18 @@ # Table structure for table 'members' # -CREATE TABLE `members` ( - `member_id` int(11) unsigned NOT NULL auto_increment, - `firstname` varchar(100) default NULL, - `lastname` varchar(100) default NULL, - `login` varchar(100) NOT NULL default '', - `passwd` varchar(32) NOT NULL default '', - PRIMARY KEY (`member_id`) + +CREATE TABLE `members` ( + `member_id` int(11) unsigned NOT NULL auto_increment, + `firstname` varchar(100) default NULL, + `lastname` varchar(100) default NULL, +`email` varchar(100) default NULL, + `city` varchar(100) default NULL, +`state` varchar(100) default NULL, +`country` varchar(100) default NULL, +`phone` varchar(100) default NULL, +`login` varchar(100) NOT NULL default '', +`passwd` varchar(32) NOT NULL default '', + PRIMARY KEY (`member_id`) ) TYPE=MyISAM; - - -# -# Dumping data for table 'members' -# - -INSERT INTO `members` (`member_id`, `firstname`, `lastname`, `login`, `passwd`) VALUES("1", "Jatinder", "Thind", "phpsense", "ba018360fc26e0cc2e929b8e071f052d"); diff --git a/site/login/login/register-exec.php b/site/login/login/register-exec.php deleted file mode 100644 index 3c58f7fd..00000000 --- a/site/login/login/register-exec.php +++ /dev/null @@ -1,110 +0,0 @@ -<?php - //Start session - session_start(); - - //Include database connection details - require_once('libs/config.php'); - - //Array to store validation errors - $errmsg_arr = array(); - - //Validation error flag - $errflag = false; - - //Connect to mysql server - $link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD); - if(!$link) { - die('Failed to connect to server: ' . mysql_error()); - } - - //Select database - $db = mysql_select_db(DB_DATABASE); - if(!$db) { - die("Unable to select database"); - } - - //Function to sanitize values received from the form. Prevents SQL injection - function clean($str) { - $str = @trim($str); - if(get_magic_quotes_gpc()) { - $str = stripslashes($str); - } - return mysql_real_escape_string($str); - } - - //Sanitize the POST values - $fname = clean($_POST['fname']); - $lname = clean($_POST['lname']); - $email = clean($_POST['email']); - $login = clean($_POST['login']); - $password = clean($_POST['password']); - $cpassword = clean($_POST['cpassword']); - - //Input Validations - if($fname == '') { - $errmsg_arr[] = 'First name missing'; - $errflag = true; - } - if($lname == '') { - $errmsg_arr[] = 'Last name missing'; - $errflag = true; - } - if($email == '') { - $errmsg_arr[] = 'Email missing'; - $errflag = true; - } - if($login == '') { - $errmsg_arr[] = 'Login ID missing'; - $errflag = true; - } - - if($password == '') { - $errmsg_arr[] = 'Password missing'; - $errflag = true; - } - if($cpassword == '') { - $errmsg_arr[] = 'Confirm password missing'; - $errflag = true; - } - if( strcmp($password, $cpassword) != 0 ) { - $errmsg_arr[] = 'Passwords do not match'; - $errflag = true; - } - - //Check for duplicate login ID - if($login != '') { - $qry = "SELECT * FROM members WHERE login='$login'"; - $result = mysql_query($qry); - if($result) { - if(mysql_num_rows($result) > 0) { - $errmsg_arr[] = 'Login ID already in use'; - $errflag = true; - } - @mysql_free_result($result); - } - else { - die("Query failed"); - } - } - - - //If there are input validations, redirect back to the registration form - if($errflag) { - $_SESSION['ERRMSG_ARR'] = $errmsg_arr; - session_write_close(); - header("location: register-form.php"); - exit(); - } - - //Create INSERT query - $qry = "INSERT INTO members(firstname, lastname, email, login, passwd) VALUES('$fname','$lname', '$email', '$login','".md5($_POST['password'])."')"; - $result = @mysql_query($qry); - - //Check whether the query was successful or not - if($result) { - header("location: register-success.php"); - exit(); - }else { - die("Query failed"); - } -?> \ No newline at end of file diff --git a/site/login/login/register-form.php b/site/login/login/register-form.php deleted file mode 100644 index 5d3bceb2..00000000 --- a/site/login/login/register-form.php +++ /dev/null @@ -1,59 +0,0 @@ -<?php - session_start(); -?> -<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> -<html xmlns="http://www.w3.org/1999/xhtml"> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> -<title>Login Form</title> -<link href="loginmodule.css" rel="stylesheet" type="text/css" /> -</head> -<body> -<?php - if( isset($_SESSION['ERRMSG_ARR']) && is_array($_SESSION['ERRMSG_ARR']) && count($_SESSION['ERRMSG_ARR']) >0 ) { - echo '<ul class="err">'; - foreach($_SESSION['ERRMSG_ARR'] as $msg) { ?> - <div align="center" ><font color="red" <? echo '<li>',$msg,'</li>'; ?> </div> </font> <? - } - echo '</ul>'; - unset($_SESSION['ERRMSG_ARR']); - } - -?> - -<form id="loginForm" name="loginForm" method="post" action="register-exec.php"> - <table width="300" border="0" align="center" cellpadding="2" cellspacing="0"> - <tr> - <th>First Name </th> - <td><input name="fname" type="text" class="textfield" id="fname" /></td> - </tr> - <tr> - <th>Last Name </th> - <td><input name="lname" type="text" class="textfield" id="lname" /></td> - </tr> - <tr> - <th>Email </th> - <td><input name="email" type="text" class="textfield" id="email" /></td> - </tr> - <tr> - <th width="124">Login</th> - <td width="168"><input name="login" type="text" class="textfield" id="login" /></td> - </tr> - - <tr> - <th>Password</th> - <td><input name="password" type="password" class="textfield" id="password" /></td> - </tr> - <tr> - <th>Confirm Password </th> - <td><input name="cpassword" type="password" class="textfield" id="cpassword" /></td> - </tr> - <tr> - <td> </td> - <td><input type="submit" name="Submit" value="Register" /></td> - - </tr> - </table> -</form> -</body> -</html> diff --git a/site/login/login/register-success.php b/site/login/login/register-success.php deleted file mode 100644 index 3ab93a5e..00000000 --- a/site/login/login/register-success.php +++ /dev/null @@ -1,12 +0,0 @@ -<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> -<html xmlns="http://www.w3.org/1999/xhtml"> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> -<title>Registration Successful</title> -<link href="loginmodule.css" rel="stylesheet" type="text/css" /> -</head> -<body> -<h1>Registration Successful</h1> -<p><a href="index.php">Click here</a> to login to your account.</p> -</body> -</html>