PHP and MySQL Web Development 4th Ed-tqw-_darksiderg

Implementing Login
705
Listing 30.4
}
}
}
Continued
return true;
} else {
return false;
}
} else {
echo "Could not store new account.";
return false;
}
This function first checks that the user has filled in the required details. If this is okay, the
function will then either create a new user or update the account details if the user
already exists. A user can update only the account details of the user he is logged in as.
The logged-in user’s identity is checked using the get_email() function, which
retrieves the email address of the user who is currently logged in.We return to this function
later because it uses session variables that are set up when the user logs in.
Logging In
If a user fills in the login form you saw in Figure 30.4 and clicks on the Log In button,
she will enter the index.php script with the email and password variables set.This activates
the login code, which is in the preprocessing stage of the script, as follows:
// need to process log in or out requests before anything else
if(($_POST['email']) && ($_POST['password'])) {
$login = login($_POST['email'], $_POST['password']);
if($login == 'admin') {
$status .= "
".get_real_name($_POST['email'])."
logged in successfully as
Administrator.";
$_SESSION['admin_user'] = $_POST['email'];
} else if($login == 'normal') {
$status .= "
".get_real_name($_POST['email'])."
logged in successfully.";
$_SESSION['normal_user'] = $_POST['email'];
} else {
$status .= "Sorry, we could