I am currently developing a login system for a news website as part of my coursework. However, I am facing an issue where the if statement using $rows->num_rows == 1 always executes the "else" code. This means that it is not detecting a row in my database table that matches the user information being entered. Below is the PHP code that is triggered when data is submitted through the HTML form:
<?php
error_reporting(E_ALL);
ini_set('display_errors', 1);
// Connect to DB
include_once("db_connect.php") or die ("Could not connect to DB");
$username = $_POST['user'];
$password = $_POST['password'];
session_start();
if(trim($username) != '' and trim($password) != ''){
// Sanitize input
$username = stripslashes($username);
$password = stripslashes($password);
$username = strip_tags($_POST['user']);
$password = strip_tags($_POST['password']);
$username = mysqli_real_escape_string($conn, $username);
$password = mysqli_real_escape_string($conn, $password);
// Check if username exists
$query = mysqli_query($conn, "SELECT * FROM user WHERE users='$username' AND password = '$password'")
or die(mysqli_error($conn));
$numrows = mysqli_num_rows($query);
if($numrows > 0){
$_SESSION['login_user'] = $username; // Initialize Session
header("location: index.php"); // Redirect To Another Page
exit;
} else {
echo "Username or password is incorrect.";
}
} else {
echo "Please enter information";
}
?>
The issue arises at the end if statement where no rows are detected. The database table contains one row of user information (username & password), and the HTML form uses POST method.
After researching for 3 hours, I still haven't found a solution to this problem.
Current error logs:
Warning: include_once(1): failed to open stream: No such file or directory in /home/vol9_7/byethost4.com/b4_18083024/htdocs/loginAuth.php on line 6
Warning: include_once(): Failed opening '1' for inclusion
(include_path='.:/usr/share/pear/') in
/home/vol9_7/byethost4.com/b4_18083024/htdocs/loginAuth.php on line 6
Notice: Undefined variable: conn in
/home/vol9_7/byethost4.com/b4_18083024/htdocs/loginAuth.php on line 22
Warning: mysqli_real_escape_string() expects parameter 1 to be mysqli, null
given in /home/vol9_7/byethost4.com/b4_18083024/htdocs/loginAuth.php on line
22
...
EDIT: Following Fred -ii-'s suggestion,
has been placed at the beginning of the code.include_once("db_connect.php")or die ("Couldnt connect to DB");
Secondly, a new if statement has replaced the old version, as per Fred -ii-'s advice.
Thirdly, the SQL statement has been corrected since there was confusion between table and column names.
Lastly,
has been added to facilitate error identification, also thanks to Fred -ii-'s recommendation.error_reporting(E_ALL); ini_set('display_errors', 1);