connect_error > 0) {
die('Could not connect: ' . $con->connect_error);
exit(); // you should redirect to some form of error page !!!!
}
// or by using prepared statements
$sqlcmd = "SELECT CAST(userid as CHAR) as userid, loginname, accesslevel
from users
WHERE username = ? and password = ?";
$sql = $con->prepare($sqlcmd);
$sql->bind_param("ss", $username, $password);
$sql->execute();
$sql->bind_result($userid, $loginname, $accesslevel);
$sql->store_result();
$sql->fetch();
// check if we have only 1 record
if ($sql->affected_rows == 0)
$errormsg = "Username/Password incorrect";
else {
// check if we have > 1 record
if ($sql->affected_rows > 1)
$errormsg = "Error: 0x123fe1abc has occurred. Contact Administrator";
else {
// if we get here its a good login
// check the access level 0 - is the user, 2 account is locked
if ($accesslevel == 2)
$errormsg = "Unable to login - Account is locked";
else {
// keep track of key data - it is used throughout the webapp
$_SESSION['loginname'] = $loginname;
$_SESSION['accesslevel'] = $accesslevel;
$_SESSION['loggedin'] = 1;
// we have a login update the users table to when they logged in
$sqlcmd = "UPDATE users set lastloggedin = NOW() WHERE userid = ?";
$sql = $con->prepare($sqlcmd);
$sql->bind_param("i", $userid);
$sql->execute();
// redirect to the dashboard
header('Location: http://localhost/MusicDatabaseWebApp/dashboard/index.php');
exit();
}
}
}
}
?>
Signin To Rentals V1.0