Hi Folks!!

I am trying to create a login script. I do not want to use any DB for Username/Password validation as this is for assignment purposes!!

I have written this so far!! I have no luck in getting this right so far. Please can somebody help me in getting this right!!!

I have usernames and passwords stored in a text file called USERS.TXT in the following format which I need to use for validation during comaprison:

Dave:Dave123
Katie:Katie123
...and so on

PS: I am a brand new beginner in PHP World! :)



<?

// Check if the form has been submitted:
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
$handle = fopen("users.txt", "r");
// Handle the form:
if ( (!empty($_POST['username'])) && (!empty($_POST['password'])) ) {

if ( (strtolower($_POST['username']) == 'user') && ($_POST['password'] == 'pass') ) { // Correct!

// Do session stuff:
session_start();
$_SESSION['username'] = $_POST['username'];
$_SESSION['loggedin'] = time();

// Redirect the user to the welcome page!
ob_end_clean(); // Destroy the buffer!
header ('Location: welcome.php');
exit();

} else { // Incorrect login details!

print '<p>The login details do not match with those on our system!<br />Please try again.</p>';

}

} else { // Forgot a field.

print '<p>Please make sure you enter both the username and password!<br />Please try again.</p>';

}

} else { // Display the form.
print '<form action="login.php" method="post">
<p>Username: <input type="text" name="username" size="20" /></p>
<p>Password: <input type="password" name="password" size="20" /></p>
<p><input type="submit" name="submit" value="Log In!" /></p>
</form>';

}

?>