Pro PHP and jQuery by Jason Lengstorf.pdf - Computer Science ...

}
try
{
WHERE
`user_name` = :uname
LIMIT 1";
$stmt = $this->db->prepare($sql);
$stmt->bindParam(':uname', $uname, PDO::PARAM_STR);
$stmt->execute();
$user = array_shift($stmt->fetchAll());
$stmt->closeCursor();
}
catch ( Exception $e )
{
die ( $e->getMessage() );
}
/*
* Fails if username doesn't match a DB entry
*/
if ( !isset($user) )
{
return "Your username or password is invalid.";
}
// finish processing...
CHAPTER 6 ■ PASSWORD PROTECTION SENSITIVE ACTIONS AND AREAS
Now the user’s data is stored in the variable $user (or the method failed because no match was
found for the supplied username in the users table).
Finishing Steps 5-7 completes the method; do this by adding the following bold code:
public function processLoginForm()
{
/*
* Fails if the proper action was not submitted
*/
if ( $_POST['action']!='user_login' )
{
return "Invalid action supplied for processLoginForm.";
}
/*
* Escapes the user input for security
*/
$uname = htmlentities($_POST['uname'], ENT_QUOTES);
$pword = htmlentities($_POST['pword'], ENT_QUOTES);
/*
* Retrieves the matching info from the DB if it exists
*/
$sql = "SELECT
205