Ajax + PHP login script not working

Question

I've been trying to solve the problem myself to no avail. Below is my code:

checklogin.php

<?php
session_start();
// Connect to db
include('db.php');

$stmt = $conn->prepare('SELECT * FROM users WHERE username = :username AND password = :password');
$stmt->execute(array(':username' => $_POST['username'], ':password' =>   $_POST['password']));

$result = $stmt->fetch(PDO::FETCH_ASSOC);
$affected_rows = $stmt->rowCount();
//$stmt->setFetchMode(PDO::FETCH_ASSOC);
//$affected_rows = $stmt->fetchColumn();

$username = $_POST['username'];
$password = $_POST['password'];

/*
if($affected_rows == 1) {
    /*while($affected_rows = $result){
        //add the user to our session variables
        $_SESSION['username'] = $username;
        if($affected_rows['authority'] == 'admin'){
            $_SESSION['authority'] == 'admin';
            header("Location: main.php");
            exit;
        }
        if($affected_rows['authority'] == 'doctor'){
            $_SESSION['authority'] == 'doctor';
            header("Location: pages/doctor/index.php");
            exit;
        }
        if($affected_rows['authority'] == 'nurse'){
            $_SESSION['authority'] == 'nurse';
            header("Location: pages/nurse/index.php");
            exit;
        }
    }
    echo 'OK';
}

else if($username == '' || $password == '' ){
    echo 'Blank fields!';
}
else {
    print 'access is not allowed !!!';
} // end of $affected_rows
*/

    if($affected_rows > 0){
        echo "Yes";
    }
    else{
        echo "No";
    }

 ?>

index.php

<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.js"></script>
<script language="javascript">  
    $(document).ready(function(){  
        $("#loginForm").submit(function(){  

            $("#report").removeClass().addClass('loader').html('<img src="images/ajax-loader.gif">').fadeIn(1000);  
            $.post("checklogin.php",{ user_name:$('#username').val(),password:$('#password').val()},function(data){  
                if(data=='yes'){  
                    $("#report").fadeTo(200,1,function(){       
                        $(this).html('Logging in.....').addClass('log').fadeTo(900,1,function(){          
                            document.location='main.php';  
                        });       
                    });  
                } else {  
                    $("#report").fadeTo(200,1,function(){        
                        $(this).html('Username or password error.').addClass('error').fadeTo(900,1);  
                    });    
                }  
            });  
            return false;   
        });  

        $("#password").blur(function(){  
            $("#loginForm").trigger('submit');  
        });  
    });  
</script>  


</head>

<body>

<div class="container">
  <form class="form-signin" action="checklogin.php" method="post" id="loginForm">
    <h2 class="form-signin-heading">User Login</h2>
    <input type="text" class="input-block-level" placeholder="Username" name="username" id="username">
    <input type="password" class="input-block-level" placeholder="Password" name="password" id="password">
    <label class="checkbox">
      <input type="checkbox" value="remember-me"> Remember me
    </label>
    <button class="btn btn-large btn-primary" type="submit" name="login" id="login">Sign in</button> 

    <div id="report"></div>

  </form>
</div> <!-- /container -->

When I input the wrong, it gives Username or password error, but when I input the correct it gives me Username or password error. Any ideas? Thanks.

Is the password really stored as plaintext or should you be hashing it for the comparison?? — MrCode
– MrCode, Commented Jul 4, 2013 at 18:28
Hmm i think the latter, I'm a beginner so I don't know how to hash it. — neknek mouh
– neknek mouh, Commented Jul 4, 2013 at 18:34

MrCode · Accepted Answer · 2013-07-04 18:36:11Z

2

First problem is in the ajax call, you're setting:

user_name:$('#username').val()

That should be with no underscore, such as:

username:$('#username').val()

Second problem is you need to change your yes comparison to Yes:

if(data=='Yes'){

answered Jul 4, 2013 at 18:36

MrCode

64.6k10 gold badges95 silver badges114 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Community · Accepted Answer · 2017-05-23 12:11:17Z

0

"PDOStatement::rowCount() returns the number of rows affected by the last DELETE, INSERT, or UPDATE statement executed by the corresponding PDOStatement object.

If the last SQL statement executed by the associated PDOStatement was a SELECT statement, some databases may return the number of rows returned by that statement. However, this behaviour is not guaranteed for all databases and should not be relied on for portable applications."

As stated here: http://php.net/manual/de/pdostatement.rowcount.php

Is guess this might be your error.

EDIT: Instead try to COUNT(*) the rows fitting.

Another solution could be: https://stackoverflow.com/a/2304377/1386873

edited May 23, 2017 at 12:11

CommunityBot

11 silver badge

answered Jul 4, 2013 at 18:27

puelo

6,0752 gold badges39 silver badges74 bronze badges

Comments

Omar Faruk Sharif · Accepted Answer · 2013-07-04 18:43:24Z

0

I think you need to change the following line:

function(data) { if data = 'yes'

to

function(data) { if data = 'Yes'

edited Jul 4, 2013 at 18:43

Omar Faruk Sharif

5813 silver badges17 bronze badges

answered Jul 4, 2013 at 18:30

Ahmed Adil Mohammed Ali

1,0271 gold badge13 silver badges25 bronze badges

Comments

Winyata Senjaya · Accepted Answer · 2013-07-04 20:01:16Z

0

may be you must add $.trim(), for trim your data before you send to server, such as :

user_name: $.trim($('#username').val())

answered Jul 4, 2013 at 20:01

Winyata Senjaya

631 silver badge5 bronze badges

Collectives™ on Stack Overflow

Ajax + PHP login script not working

4 Answers 4

Comments

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related