Currently working on a project in Unity where I am trying to implement account creation, login functionality, and saving user data using PHP and MySQL. The registration process is successfully completed, however, I am facing issues with the login process. I have been following the tutorial provided by boardtobits.
During my research, I came across information suggesting that the hash generated during account creation does not match the login hash. This has left me wondering why there is a discrepancy.
Below is the PHP code snippet for the login:
<?php
$user = 'root';
$password = 'root';
$db = 'hostalvillegadata';
$host = 'localhost';
$port = 8889;
$link = mysqli_init();
$success = mysqli_real_connect(
$link,
$host,
$user,
$password,
$db,
$port);
// Checking if the connection was successful
if (mysqli_connect_errno())
{
echo "1: Connection failed";
exit();
}
$username = $_POST["name"];
$password = $_POST["password"];
$namecheckquery = "SELECT username, salt, hash, habitacionesreservadas
FROM hostalvillegatable WHERE username='" .$username. "';";
$namecheck = mysqli_query($link, $namecheckquery) or die("2: Name check query failed");
if (mysqli_num_rows($namecheck) != 1 )
{
echo "5: No user with name, or more than one";
exit();
}
$existinginfo = mysqli_fetch_assoc($namecheck);
$salt = $existinginfo["salt"];
$hash = $existinginfo["hash"];
$loginhash = crypt($password, $salt);
if ($hash != $loginhash)
{
echo "6: Incorrect password";
exit();
}
echo "0\t" . $existinginfo["habitacionesreservadas"];
?>
And here is the C# code snippet for the login:
public class LogIn : MonoBehaviour
{
public InputField nameField;
public InputField passwordField;
public Button submitButton;
public void CallLogin()
{
StartCoroutine(Login());
}
IEnumerator Login()
{
WWWForm form = new WWWForm();
form.AddField("name", nameField.text);
form.AddField("password", nameField.text);
UnityWebRequest www = UnityWebRequest.Post("http://localhost:8080/sqlconnect/login.php", form);
yield return www.SendWebRequest();
if (www.downloadHandler.text[0] == '0')
{
DataBaseManager.username = nameField.text;
DataBaseManager.habitacionesreservadas = int.Parse(www.downloadHandler.text.Split('\t')[1]);
}
else
{
Debug.Log("User login failed. Error #" + www.downloadHandler.text);
}
}
public void VerifyInputs()
{
submitButton.interactable = (nameField.text.Length >= 5 && passwordField.text.Length >= 5);
}
C# CODE (DataBaseManager)
public static class DataBaseManager
{
public static string username;
public static int habitacionesreservadas;
public static bool LoggedIn {get { return username != null; } }
public static void LogOut()
{
username = null;
}
Despite creating multiple accounts with the same password, the system keeps prompting an incorrect password error message. Any suggestions on how to resolve this puzzle?
Looking forward to some insight!