Auth for my tool

[Leecher24]

I have before Vbullettin other Software. And this was ok.

But one question is this with VB possible too ?

And can someone fix my PHP CODE there is something wrong bequase I became on right Login False.

Sorry for my Bad english


<?php
//CONNECT TO DATABASE
$dbhost = 'xxx';
$dbusername = 'xxx';
$dbpasswd = 'xxx';
$database_name = 'xxx';
$connection = mysql_connect("$dbhost","$dbusername","$dbpasswd")
or die ("Couldn't connect to server.");
$db = mysql_select_db("$database_name", $connection)
or die("Couldn't select database.");

$login = $_GET["AUTHUSER"];
$pass = md5(md5($_GET["AUTHPW"]).$salt );
$sql=mysql_query("SELECT * from vb3_user where username='$login' and password='$pass'");
if(mysql_num_rows($sql)>0)
{
print("true");
}
else
{
print("false");
}
?>

[Paul M]

You haven't set a value for $salt in that code - but in vb, the salt is stored in the user table anyway (different for each user) so you can't do it like that. You need to extract the row for the user, do the hashing, and then compare the result.

[Leecher24]

You haven't set a value for $salt in that code - but in vb, the salt is stored in the user table anyway (different for each user) so you can't do it like that. You need to extract the row for the user, do the hashing, and then compare the result.


I can't good PHP can you code this for me please ?