PHP and MySQL Web Development 4th Ed-tqw-_darksiderg

586 Chapter 27 Building User Authentication and Personalization
The member.php script ends the page by displaying a menu with the
display_user_menu() function. Some sample output as displayed by member.php is
shown in Figure 27.6.
Figure 27.6 The member.php script checks that a user is logged in, retrieves
and displays his bookmarks, and gives him a menu of options.
Let’s look at the login() and check_valid_user() functions a little more closely now.
The login() function is shown in Listing 27.12.
Listing 27.12 login()Function from user_auth_fns.php—This Function Checks a
User’s Details Against the Database
function login($username, $password) {
// check username and password with db
// if yes, return true
// else throw exception
// connect to db
$conn = db_connect();
// check if username is unique
$result = $conn->query("select * from user
where username='".$username."'
and passwd = sha1('".$password."')");