StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PO
primarykey
Id
20753516
data
AcceptedAnswerId
0
AnswerCount
0
ClosedDate
CommentCount
0
CommunityOwnedDate
CreationDate
2013-12-24T01:11:31.683
FavoriteCount
0
LastActivityDate
2013-12-24T01:41:42.423
LastEditDate
2013-12-24T01:41:42.423
LastEditorUserId
808417
OwnerUserId
808417
ParentId
20753484
PostTypeId
2
Score
1
ViewCount
0
LastEditorDisplayName
text
Body
You are not using prepared statements (you should), and so your MySQL query's varchar fields need escaping with quotes, for example: <pre><code>$dbsalt = mysqli_query($con,"SELECT salt FROM students WHERE username = '$user'"); $dbhash = mysqli_query($con,"SELECT hash FROM students WHERE username = '$user'"); </code></pre> Notice the quotes around <code>$user</code>. Additionally, you are trying to access the data from the query directly from the result given by mysqli_query (which is actually an an object containing the data), instead, you should use like this: <pre><code>$dbresult = mysqli_query($con,"SELECT salt, hash FROM students WHERE username = '$user'"); $row = $dbresult->fetch_row(); if(testPassword($pwd, $row['salt'], $row['hash'])) .... </code></pre> Edit: after looking more closely, there are also a few other 'optimisations' you might like to consider; there is no need to assign the <code>$_SESSION</code> and <code>$_GET</code> arrays to separate variables before using them (and this may also be a reason why your data isn't getting 'stored', if you were referring to the session data?), and you only need 1 database query for your script: <pre><code><?php function testPassword($fpwd, $fdbsalt, $fdbhash) { return hash_hmac("sha256", $fpwd, $fdbsalt) == $fdbhash; } $user = $_GET['username']; $pwd = $_GET['password']; include('Connect.php'); $dbresult = mysqli_query($con,"SELECT salt, hash FROM students WHERE username = '$user'"); $found = mysqli_num_rows($dbresult); if($found < 1) { header('Location: Login.php?msg=Username%20incorrect!'); } else { $row = $dbresult->fetch_row(); if(testPassword($pwd, $row['salt'], $row['hash'])) { session_start(); $_SESSION['user'] = $user; if($user === "00000000") { header('Location: Students.php'); } else { header('Location: Display.php'); } } else { header('Location: Login.php?msg=Password%20incorrect!'); } } </code></pre>
Tags
Title
singulars
PostAcceptedAnswerId
1. This table or related slice is empty.
PostParentId
1. POLogin problems using PHP and MySQL
 singulars
 PostTypePostTypeId
 PTQuestion
PostTypePostTypeId
1. PTAnswer
UserLastEditorUserId
1. USAlfie
UserOwnerUserId
1. USAlfie
plurals
PostLinksPostIdRelatedPostId
1. This table or related slice is empty.
PostLinksRelatedPostIdPostId
1. This table or related slice is empty.
PostsAcceptedAnswerId
1. This table or related slice is empty.
PostsParentIdCreationDate
1. This table or related slice is empty.
VotesPostIdCreationDate
1. VO
 singulars
 PostPostId
 PO
 UserUserId
 This table or related slice is empty.
 VoteTypeVoteTypeId
 VTUpMod
CommentsPostId
1. This table or related slice is empty.

Querying!

Guidance

A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.