Account info page

poruka: 4
|
čitano: 1.038
|
moderatori: Lazarus Long, XXX-Man, vincimus
1
+/- sve poruke
ravni prikaz
starije poruke gore
11 godina
neaktivan
offline
Account info page

Pozdrav, radim web stranicu i zapeo sam na account info, može li mi netko napraviti ili reći uopće kako se radi html i php za to da mi čita account info? Imam već login i register html i php gotove napravljene i još mi samo fali account info. Znam da to treba preko GET funkcije ali nisam baš android u phpu pa nemam pojma kako da to napravim.

Inače ovo mi je register html i php; account info mora očitati sve to

<div id="container">
            <form name="register-form" class="register-form" action="" method="post">
             <div class="header">
                <h1>Register :</h1>
             </div>
             <div class="content">
                <div class="line"><label for="username">Username: </label><input type="text" id="username" placeholder="Username" class="input username"/></div>
                <div class="line"><label for="pwd">Password: </label><input type="password" id="pwd" placeholder="Password" class="input pwd"/></div>
                <div class="line"><label for="pwd1">Retype password: </label><input type="password" id="pwd1" placeholder="Password" class="input pwd1"/></div>
                <div class="line"><label for="surname">Surname: </label><input type="text" id="surname" placeholder="Surname" class="input surname"/></div>
                <div class="line"><label for="lastnames">Last Names: </label><input type="text" id="names" placeholder="Last Names" class="input names"/></div>
                <div class="line"><label for="dob">Date of Birth: </label><input type="text" id="dob" placeholder="Date of Birth" class="input dob"/></div>
                <div class="line"><label for="email">Email: </label><input type="email" id="email" placeholder="Email" class="input email"/></div>
                <div class="line"><label for="tel">Telephone: </label><input type="text" id="tel" placeholder="Telephone" class="input tel"/></div>
                <div class="line"><label for="add">Address: </label><input type="text" id="add" placeholder="Address" class="input add"/></div>
                <div class="line"><label for="ptc">Post Code: </label><input type="text" id="ptc" placeholder="Post Code" class="input ptc"/></div>
             </div>
                <div class="footer">
                <div class="line submit"><input type="submit" value="Submit" class="button" /></div>
             </div>
            </form>
        </div>

 

<?php
//retrieve our data from POST
$username = $_POST['username'];
$password1 = $_POST['pwd'];
$password2 = $_POST['pwd1'];
$surname = $_POST['surname'];
$lastname = $_POST['lastname'];
$dob = $_POST['dob'];
$email = $_POST['email'];
$tel = $_POST['tel'];
$address = $_POST['add'];
$ptc = $_POST['ptc'];

if($password1 != $password2)
       {
    header("Location: registration.html");
    }
if(strlen($username) > 30)
    {   
    header('Location: registration.html');
    }

$hash = hash('sha256', $password1);
 
function createSalt()
{
    $text = md5(uniqid(rand(), true));
    return substr($text, 0, 3);
}
 
$salt = createSalt();
$password = hash('sha256', $salt . $hash);
$conn = mysql_connect('localhost', 'root', '');
mysql_select_db('login', $conn);
 
//sanitize username
$username = mysql_real_escape_string($username);
 
$query = "INSERT INTO member ( username, pwd, surname, lastname, dob, email, tel, add, ptc, salt )
        VALUES ( '$username', '$password', '$surname', '$lastname', '$dob', '$email', '$tel',  '$address', '$ptc', '$salt' );";
mysql_query($query);
 
mysql_close();
 
header('Location: login.php');
?>

Poruka je uređivana zadnji put sri 16.4.2014 14:12 (Simon_says).
 
0 0 hvala 0
14 godina
neaktivan
offline
Account info page

HTML forma nije povezana sa login.php fileom. "Okidač" koji ju povezuje je action="nekiPHPfile.php".

Znači treba ti:

 

<form name="register-form" class="register-form" action="login.php" method="post">

http://portfolio.33dizajn.com
 
0 0 hvala 1
11 godina
neaktivan
offline
Re: Account info page

Evo pokušaj ovo iskoristiti, samo pazi:

 - Nije testirano

 - Nije otporno na SQL injekcije i sl. odnosno nema dodatnih verifikacija

 

http://pastebin.com/LWmMk2U6

www.lakotuts.com
11 godina
neaktivan
offline
Account info page

Radi, i još sam malo prepravio to u PDO tako da ima dobar security sad, i u mom htmlu sam zaboravio staviti ono "action=register.php". Hvala.

 
0 0 hvala 0
1
Nova poruka
E-mail:
Lozinka:
 
vrh stranice