Starting a login session with multiple querys

Question

$username = $_POST['username'];
$password = $_POST['password'];

/* check connection */
if (mysqli_connect_errno()) {
    printf("Connect failed: %s\n", mysqli_connect_error());
    exit();
}

$query = "SELECT * FROM users WHERE username = '$username' AND password = '$password'";
$query .= "SELECT balance FROM users WHERE id ='1'";

if (mysqli_multi_query($connect, $query)) {
    do {
        /* store first result set */
        if ($result = mysqli_store_result($connect)) {
            while ($row = mysqli_fetch_row($result)) {

                if($row['username'] == $username && $row['password'] == $password && $password != '' && $username != ''){
                        session_start();    
                        $_SESSION['username'] = $row['username'];
                        $_SESSION['email'] = $row['email'];
                        $_SESSION['balance'] = $row['balance'];
                        echo "Logged in successfully!";
                    } else {
                        echo "Invalid username or password!";
                    }
            }
            mysqli_free_result($result);
        }
    } while (mysqli_next_result($connect));
}

When they post you get the username/password, what I'm not sure is how to save the person information in a session variable(I assume that's the proper way to do stuff), other information on their row.

As of now I can't even enter the if statement that checks username and password

baaad way to construct queries. You'll get a visit from [Bobby](http://xkcd.com/327/)! — vascowhite, Nov 24 '13 at 09:42
[here is a good tutorial](http://wiki.hashphp.org/PDO_Tutorial_for_MySQL_Developers) — vascowhite, Nov 25 '13 at 06:48

score 1 · Answer 1 · edited May 23 '17 at 12:19

1

Sessions are the way forward here.

Here a basic tutorial to help you start.

$_SESSION

Also look at sanitising your queries before running them directly on your server.

Here is another example: LINK

edited May 23 '17 at 12:19

Community

1
1

answered Nov 24 '13 at 09:40

Rob

409
4
20

Starting a login session with multiple querys

1 Answers1