mysqli - PHP Query invalid result -

-

i apologise if title confusing, when run page code below , enter email not found in database, on webpage notice: trying property of non-object in c:\xampp\htdocs\testing\login.php on line 72. instead of saying this, want give error email not registered.

    <?php session_start();//session starts here if(isset($_session['adminname'])||isset($_session['email'])){     header("location: welcome.php");//redirect login page secure welcome page without login access. } ?>    <html> <head lang="en">     <meta charset="utf-8">     <link type="text/css" rel="stylesheet" href="bootstrap-3.2.0-dist\css\bootstrap.css">     <title>login</title> </head> <style>     .login-panel {         margin-top: 150px;  </style>  <body>   <div class="container">     <div class="row">         <div class="col-md-4 col-md-offset-4">             <div class="login-panel panel panel-success">                 <div class="panel-heading">                     <h3 class="panel-title">sign in</h3>                 </div>                 <div class="panel-body">                     <form role="form" method="post" action="login.php">                         <fieldset>                             <div class="form-group"  >                                 <input class="form-control" placeholder="e-mail" name="email" type="email" autofocus>                             </div>                             <div class="form-group">                                 <input class="form-control" placeholder="password" name="pass" type="password" value="">                             </div>                                   <input class="btn btn-lg btn-success btn-block" type="submit" value="login" name="login" >                              <!-- change button or input when using form -->                           <!--  <a href="index.html" class="btn btn-lg btn-success btn-block">login</a> -->                         </fieldset>                     </form>                 </div>             </div>         </div>     </div> </div>   </body>  </html>  <?php  include("database/db_conection.php");  if(isset($_post['login'])){     $user_email=mysqli_real_escape_string($dbcon, $_post['email']);     $user_pass=mysqli_real_escape_string($dbcon, $_post['pass']);      $encrypted_password = password_hash($user_pass, password_bcrypt);       $query = $dbcon->query("select user_pass users user_email='$user_email'");      $passwordvalue=$query->fetch_object()->user_pass;      if (password_verify($user_pass,$passwordvalue)){         echo "success!";     }else{         echo $encrypted_password;         echo "<div class='alert alert-danger'><a href='#' class='close' data-dismiss='alert' aria-label='close'>&times;</a><strong>error!</strong> email or password entered incorrect!</div>";     }         /*$check_user="select * users user_email='$encrypted_email' , user_pass='$user_pass'";      $run=mysqli_query($dbcon,$check_user);      if(mysqli_num_rows($run))     {         echo "<script>window.open('welcome.php','_self')</script>";          $_session['email']=$user_email;//here session used , value of $user_email store in $_session.      }     else     {         echo "<script>alert('email or password incorrect!')</script>";     }*/ } ?>

this code found in login.php file. php code within comment isn't part of web page, removing later.

<html> <head lang="en">     <meta charset="utf-8">     <link type="text/css" rel="stylesheet" href="bootstrap-3.2.0-dist\css\bootstrap.css">     <title>login</title> </head> <style>     .login-panel {         margin-top: 150px;  </style>  <body>   <div class="container">     <div class="row">         <div class="col-md-4 col-md-offset-4">             <div class="login-panel panel panel-success">                 <div class="panel-heading">                     <h3 class="panel-title">sign in</h3>                 </div>                 <div class="panel-body">                     <form role="form" method="post" action="login.php">                         <fieldset>                             <div class="form-group"  >                                 <input class="form-control" placeholder="e-mail" name="email" type="email" autofocus>                             </div>                             <div class="form-group">                                 <input class="form-control" placeholder="password" name="pass" type="password" value="">                             </div>                               <input class="btn btn-lg btn-success btn-block" type="submit" value="login" name="login" >                              <!-- change button or input when using form -->                             <!--  <a href="index.html" class="btn btn-lg btn-success btn-block">login</a> -->                         </fieldset>                     </form>                 </div>             </div>         </div>     </div> </div>   </body>  </html>  <?php  include("database/db_conection.php");  if(isset($_post['login'])){     $user_email=mysqli_real_escape_string($dbcon, $_post['email']);     $user_pass=mysqli_real_escape_string($dbcon, $_post['pass']);      $encrypted_password = password_hash($user_pass, password_bcrypt);       if ($query = $dbcon->query("select user_pass users user_email='$user_email'") == false) {         echo "the email doesn't exist in db";     } else {         $passwordvalue=$query->fetch_object()->user_pass;          if (password_verify($user_pass,$passwordvalue)){             echo "success!";         }else{             echo $encrypted_password;             echo "<div class='alert alert-danger'><a href='#' class='close' data-dismiss='alert' aria-label='close'>&times;</a><strong>error!</strong> email or password entered incorrect!</div>";         }             /*$check_user="select * users user_email='$encrypted_email' , user_pass='$user_pass'";          $run=mysqli_query($dbcon,$check_user);          if(mysqli_num_rows($run))         {             echo "<script>window.open('welcome.php','_self')</script>";              $_session['email']=$user_email;//here session used , value of $user_email store in $_session.          }         else         {             echo "<script>alert('email or password incorrect!')</script>";         }*/     } } ?>

i've added if statement checks if query false, if it's false echo email doesn't exist in database, wanted, if exist, you're fetched password want.


Comments

Post a Comment

Popular posts from this blog

c# - Better 64-bit byte array hash -

-
i need hash algorithm produces 64-bit hash code ( long ) fewer collisions string.gethashcode() , fast (no expensive calls cryptographic functions). here's implementation of fnv still shows 3% of collisions after testing 2 million random strings. need number way lower. void main() { const string chars = "abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz!#@$%^&*()_+}{\":?><,./;'[]0123456789\\"; const int n = 2000000; var random = new random(); var hashes = new hashset<long>(); int collisions = 0; for(int = 0; < n; i++) { var len = random.next(chars.length); var str = new char[len]; (int j = 0; j < len; j++) { str[j] = chars[random.next(chars.length)]; } var s = new string(str); if(!hashes.add(get64bithash( s ))) collisions++; } console.writeline("collision percentage after " + n + " random strings: " + ((doubl
Read more

webrtc - Which ICE candidate am I using and why? -

-
[questions in bold below] i have setup kurento media server 5.1.3 in datacenter behind firewall running os ubuntu 14.04. has 2 network cards: 222.222.222.222 (eth0 - private ip) 111.111.111.111 (eth1 - public ip) attached below sdp (setremotedescription) when browser connected kurento media server type: answer, sdp: v=0 o=- 5487318114793304426 0 in ip4 0.0.0.0 s=kurento media server c=in ip4 0.0.0.0 t=0 0 a=group:bundle audio video m=audio 59068 rtp/savpf 111 0 c=in ip4 111.111.111.111 a=rtpmap:111 opus/48000/2 a=rtpmap:0 pcmu/8000 a=sendrecv a=rtcp:59068 in ip4 111.111.111.111 a=rtcp-mux a=ssrc:669011897 cname:user39019747@host-6e83e4c2 a=extmap:3 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time a=mid:audio b=as:20 a=ice-ufrag:ymdk a=ice-pwd:lylifk5ueqzpwm91ddj37e a=fingerprint:sha-256 ff:0f:81:8c:41:4e:b4:b6:c6:d8:36:f3:d6:5f:09:fd:5f:af:13:b3:9d:fc:12:66:ac:f3:56:d6:5b:0a:73:5d a=candidate:1 1 udp 2013266431 111.111.111.111 55239 typ host a=candidate:2 1 udp
Read more

php - Zend Framework / Skeleton-Application / Composer install issue -

-
i trying create zend framework application using skeleton in netbeans. when run composer install, following error message: "c:\php\php.exe" "c:\composer\composer.phar" "--ansi" "--no-interaction" "update" "--dev" using deprecated option "dev". dev packages installed default now. loading composer repositories package information updating dependencies (including require-dev) requirements not resolved installable set of packages. problem 1 - package requires php >=5.5 php version (5.4.42) not satisfy requirement. problem 2 - installation request zendframework/zendframework 2.5.1 -> satisfiable zendframework/zendframework[2.5.1]. - zendframework/zendframework 2.5.1 requires php >=5.5 -> php version (5.4.42) not satisfy requirement. done. apparently, zend framework only needs php 5.3+ contradicts above. need use php 5.4. my composer.json following: { "name": "
Read more