Comments on: User Membership With PHP

By: balloon game

balloon game — Tue, 16 Mar 2010 08:24:57 +0000

thanks nice post.

By: Resources to Get You Started with PHP from Scratch « UR-Technology

Resources to Get You Started with PHP from Scratch « UR-Technology — Sun, 07 Mar 2010 02:39:04 +0000

[...] Visit Article [...]

By: araba oyunları

araba oyunları — Thu, 18 Feb 2010 13:21:03 +0000

SELECT n.nid FROM node n LEFT JOIN term_node tn ON n.nid = tn.nid GROUP BY n.nid HAVING count(tn.tid) =

By: araba oyunları

araba oyunları — Thu, 18 Feb 2010 13:19:55 +0000

site with a lot of nodes, especially nodes that have been migrated out of another CMS or blogging tool, you’ll probably find yourself wondering which nodes are floating around without any taxonomy terms, so that you can go back and make sure they’re duly categorized.

By: araba oyunu

araba oyunu — Wed, 10 Feb 2010 16:37:27 +0000

thank. nice post

By: dic

dic — Thu, 21 Jan 2010 19:14:48 +0000

HI, what if i want add more atributes in table like: name, surname, addres.. then register working fine but if i want log in then i get msg that this account cant be find…

so i have in table users: UserID, Username, Password, PasswordAgain, Name, Surname, email and country!

any ideas what i need change in index.php ?

By: 45 Must Read PHP Articles and Resources

45 Must Read PHP Articles and Resources — Fri, 08 Jan 2010 17:45:16 +0000

[...] User Membership With PHP [...]

By: 15 Very Useful PHP Tutorials

15 Very Useful PHP Tutorials — Tue, 05 Jan 2010 09:10:46 +0000

[...] 9. User Membership With PHP [...]

By: John

John — Sat, 02 Jan 2010 20:12:23 +0000

Your script is unfortunately very error-prone, I would highly recommend you to pick up a security book to learn how to code securely.

Just to give you an example:
- Your example code runs the query with root. Never do anything with root, you should create a low privilege user with only certain access such as select, insert, or delete (depends on the specific cases) to the src table.
- Start to parameterize your query and restrict its acceptable data range, data types, e.g: select * from users where username = “%s AND password = “%s”, $username, $password;

I have seen too many problems in your code, style, security, maintenance, performance etc.

By: Cyanoxide

Cyanoxide — Wed, 30 Dec 2009 22:13:08 +0000

I also have the “and your email address is .” bug, anyone know how to fix it, I looked other all the comments and it seems that everyone who had this problem either fixed it themselves or was ignored.