Trying to grasp the concepts of PHP & MYSQL, I have written this code which seems to be functioning properly. However, there are several "warnings" that I am unsure about. Nonetheless, PHP successfully connects to the database. Below are the relevant codes:
myPage.php is considered the main page.
<!DOCTYPE HTML>
<html>
<head>
<link rel="stylesheet" href='http://localhost/prove/librerie/bootstrap/css/bootstrap.css'></script>
<script type="text/javascript" src='http://localhost/prove/librerie/angular.min.js'></script>
<script type="text/javascript" src='http://localhost/prove/librerie/bootstrap/js/bootstrap.min.js'></script>
<body>
<form action="procces.php" method="POST">
<div class="text-info identazione" class="identazione">Username : </div><input lass="form-control" type="text" name="username"/>
<div class="text-info identazione">Password : </div><input type="text" name="password"/>
<div class="identazione"><input class=" btn btn-success" type="submit"/></div>
</form>
</body>
</head>
<style>
body {
padding : 50px;
}
.identazione{
padding: 12px;
}
</style>
process.php
<?php
//from myPage to local variables
$username = $_POST['username'];
$password = $_POST['password'];
//to prevent mysql injection
$username= stripcslashes($username);
$password= stripcslashes($password);
$username= mysql_real_escape_string($username);
$password= mysql_real_escape_string($password);
//connection to server and selection of database
mysql_connect("localhost","root","");
mysql_select_db("login");
//query to database for user
$risultato= mysql_query("select * from utenti where username = '$username' and password = '$password' ") or die("User not found, please check your credentials".mysql_error());
$row = mysql_fetch_array($result);
if($row['username']==$username && $row['password']==$password){
echo "Login Successful. Welcome".$row['username'];
}
else
echo "Incorrect Login. Please re-enter your details";
?>
Below is a screenshot showing the warnings:
https://i.stack.imgur.com/5yIhp.png
Additionally, I work on Chrome and use Wampp. The comments in Italian should not pose an issue. I have created a database named login, defined with fields for username, password, and id. I have also set up a test user with the credentials usertest and userpass. These login details work when entered, despite the presence of errors.
UPDATE:
I corrected 'result' to 'risutato', which was my mistake resulting in only two warnings now. However, it appears I need to update my knowledge as I am utilizing outdated sources.