Do not receive the POST data

Question

I am trying to generate the login according to the database data and proceed to the page restricted to registered users, but there is incorrect password error.

Front-end:

<div class="login-form">    
        <form action="modulo.php" method="POST">
        <input type="email" placeholder="E-mail" value="email" >
        <input type="password" placeholder="Senha" value="password" >
        <input type="submit" class="btn-submit" value="Login"> 
    </div>

Back-end

 <?php

    session_start();
    // error_reporting('1');
    include 'config.php';

    // username and password sent from form
    $myusername=$_POST['email'];
    $mypassword=$_POST['password'];


    // To protect MySQL injection (more detail about MySQL injection)
    $myusername = stripslashes($myusername);
    $mypassword = stripslashes($mypassword);
    $myusername = mysql_real_escape_string($myusername);
    $mypassword = mysql_real_escape_string($mypassword);

    $sql="SELECT * FROM login WHERE email='$myusername' and password='$mypassword'";
    $result=mysql_query($sql);

    // Mysql_num_row is counting table row
    $count=mysql_num_rows($result);


    // If result matched $myusername and $mypassword, table row must be 1 row

    if($count==1){

    // Register $myusername, $mypassword and redirect to file "menu.php"
    $_SESSION['email']=$myusername;
    $_SESSION['password']=$mypassword;
    header("location:menu.php");
    }
    else {
    echo "<b class='error'>Wrong Username or Password</b>";
    }
    ?>

Answer 1

Is missing name="nomeDoCampo" in the inputs of your form...

Try it like this:

<div class="login-form">    
    <form action="modulo.php" method="POST">
    <input type="email" name="email" placeholder="E-mail" value="email" >
    <input type="password" name="password" placeholder="Senha" value="password" >
    <input type="submit" class="btn-submit" value="Login"> 
</div>

Answer 2

The problem is the function mysql_* that Voce is using.

It is already obsolete and very vulnerable. use the mysqli_* library or learn PDO.

In case, your code will look like this.

$myusername=mysqli_real_escape_string(stripslashes($_POST['email']));
$mypassword=mysqli_real_escape_string(stripslashes($_POST['password']));

This giving error in mysql_num_rows, because as this function mysql_real_escape_string Easyphp is not processing, then it assigns nothing to its variable, passing no value to SQL.

NOTE: As Voce using the mysqli_* library in the above example, you will have to adapt all your code with this lib, in this case most functions, put the "i" at the end.

Answer 3

Try it like this:

<?php

session_start();
// error_reporting('1');
include 'config.php';

// username and password sent from form
$myusername=mysql_real_escape_string(stripslashes($_POST['email']));
$mypassword=mysql_real_escape_string(stripslashes($_POST['password']));


$sql="SELECT * FROM login WHERE email='$myusername' and password='$mypassword'";
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);


// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){

// Register $myusername, $mypassword and redirect to file "menu.php"
$_SESSION['email']=$myusername;
$_SESSION['password']=$mypassword;
header("location:menu.php");
}
else {
echo "<b class='error'>Wrong Username or Password</b>";
}
?>