Advertisement
TheQuack45

Nick/password check code

Jul 15th, 2015
569
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 1.34 KB | None | 0 0
  1. // Sets nick and pass variables with input from POST request
  2.         $nick = htmlspecialchars($_POST["username"]);
  3.         $pass = $_POST["pass"];
  4.        
  5.         // Prepares and executes query to retrieve user information, stores return in $userDataReturnArr
  6.         $userDataQuery = $dbh->prepare("SELECT NICK,PASS,UID FROM :tblName WHERE NICK = :nick");
  7.         $userDataQuery->bindParam(":tblName", $userDbTblName, PDO::PARAM_STR);
  8.         $userDataQuery->bindParam(":nick", $nick, PDO::PARAM_STR);
  9.         $userDataQuery->execute();
  10.         $userDataReturnArr = $userDataQuery->fetch();
  11.        
  12.         // This function always returns false, from the look of it
  13.         if (password_verify($pass, $userDataReturnArr[1])) {
  14.             // Returned pass and nick matched input pass and nick
  15.             // Login user and send to index.php
  16.             session_start();
  17.            
  18.             // Sets session variables
  19.             $_SESSION["user"] = $nick;
  20.             $_SESSION["uid"] = $userDataReturnArr[2];
  21.            
  22.             header("Location: index.php");
  23.         } else {
  24.             echo "\$userDbTblName: ".$userDbTblName."<br>";
  25.             echo "\$nick: ".$nick."<br>";
  26.             echo "\$pass: ".$pass."<br>";
  27.             echo "\$userDataReturnArr[0]: ".$userDataReturnArr[0]."<br>";
  28.             echo "\$userDataReturnArr: ".var_dump($userDataReturnArr)."<br>";
  29.             echo "PHP Version: ".phpversion();
  30.             // Returned pass and nick did not match input pass and nick
  31.             header("Location: loginFailed.php?error=nomatch");
  32.         }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement