0

whenever i try to log in with registered users by writing their usernames and hash(password) in the log in form .I get a (invalid username or password ) message. should I implement (portfolio) to be logged in ??

  • What steps have you tried to debug this? Have you tried implementing portfolio? If you inspect the source code (HTML) of the login form, can you see which file is being called when the form is submitted? Have you tried adding some random code in this file to generate some output and/or to break something? – Luke Van In Nov 15 '15 at 12:39
0

You do not have to implement portfolio to log in. hash is not the password, it is a hash of the password, i.e encrypted. You cannot login with the hash as you see it in mysql. Assuming you have installed the database as per the instructions, the spec gives you the plaintext password for user skroob (which is 12345), the same as his luggage combination) on page 10.

| improve this answer | |
  • ok now I understand but when I register a new user and set the password , it's stored in the data base without hashing .is that ok ? – kawegan Nov 16 '15 at 17:51
  • Probably not. Did you try it? The supplied login script expects the password to be encrypted (look at login.php around line 35). The instructions give good information about encrypting the password on page 21 in the suggested query to insert a user. – DinoCoderSaurus Nov 16 '15 at 18:18
  • Oops, I got carried away.....Assuming the "answer" answered your original question, you should click the check to indicate that. Additional questions should be added as new questions. – DinoCoderSaurus Nov 16 '15 at 20:05
  • ok i'm gonna post my new question – kawegan Nov 17 '15 at 6:44

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .