This tutorial has helped me immensely

Thank you very much Jeffery.

real_escape_string($_POST['username']);
$password = $mysqli->real_escape_string($_POST['password']);

echo $username.”.$password;

$q = “SELECT id FROM users WHERE user_name = ‘$username’ AND password = ‘$password’”;

$result = $mysqli->query($q) or die(mysqli_error());
$num_rows = $result->num_rows;

if ($num_rows == 1) {
setcookie(’authorized’, 1, 0);
header(”Location: index.php”);
} else {
header(”Location: login.php”);
}
?>

I think this works because database.php declares a mysqli object and the subsequent code in the confirm_login_credentials.php file now uses object notation instead of a procedural flavour of coding. Hope this works for your problem.

Changing it means you have to change well quite a few things…. I actually took out the cookie verification and bypassed the login completely as i don’t need it I’m testing this local and will implement something else when i go live.

database.php

$db_name = “db”;
$db_server = “localhost”;
$db_user = “root”;
$db_pass = “***”;

$mysqli = mysql_connect($db_server, $db_user, $db_pass);
if (!$mysqli)
{
die(’Could not connect: ‘ . mysql_error());
}
mysql_select_db($db_name, $mysqli);

and the getPhotos.php

require ‘database.php’;

$result = $result = mysql_query(”SELECT * FROM photos”);

if ($result) {

echo ” \n”;

while ($row = mysql_fetch_array($result)) {
$title = $row['title'];
$src = $row['src'];
$id = $row['id'];

echo “ \n”;
echo “$title \n”;
echo ” \n \n”;
}

echo “”;

}

I will definately be a regular visitor to this website

Maybe it’s just me

Sick site though, by far the best content with a nice clean feel