Difference between revisions of "PHP-and-MySQL/C4/User-Password-Change-Part-2/English-timed"

|Then we type “Where username is equal to user”. This is our session variable holding our user’s user name.   

|So, what we are doing is we are selecting our password hash from this table where the username is equal to the session name, and that is equal to “Alex”.

|So, that should be a successful query.  And you can type at the end “ or die "Query didn’t work”" - some error message.

|Same here.  You can say “or die”.  You can add your own error message in here but to save time, I am not going to right now.

|Now, we will use this slightly differently, before we use the "while" function to loop through every record in the data base.

|I was informed about this method through a comment someone posted.  I will say "row = mysql_fetch_associative".  And that‘s "query get"

|We will set “old password db” which is a new variable name . Don’t mistake this with the old password that has been submitted.

|Our old password inside the database will be equal to our row.

|Remember this creates an array.   

|So this value is” password”, because inside our database, this is “password” here. You need to use the labels.

|So from here on we can check our passwords.

|Checking our old passwords and our new passwords is just a simple “IF” statement.  

|Lets type - if the old password is equal to the old password inside the database.

|These are both md5 hashes because we converted them into an md5 hash earlier.   

|So here, assuming we’ve got through the first stage of our validation,- we checked the old password with to old password in the database - now we need to  our two new passwords.

|Now this is just as simple as typing “if new password is equal to repeat new password”, then we can write a block of code, otherwise we can just kill the page and say “ New passwords don’t match!”.

|So here this is “success” and then we’ll say “change password in database”.

|So now what I’ll do is echo out “success” and I’ll go back to my page.

|I’ll type my password wrong on purpose. So I’ll just type this.  

|My new password I’ll type as "abc" and then clicking on “change password” we get the message "Old password doesn’t match!".

|If I type "abc" as my old password, which it is, and "123" as my new password and random letters in the next, we should get.....Oh "Old password doesn’t match!"

|Lets go back and check the code.  Old password......... row - password............ query get........  

|What we can do here to debug is just say “echo old password db” with a break on the end, and just say echo old password with another break.

|What we can do now is, run the script again, so old password equals "abc", new password equals "123" and then random letters.

|okay so let’s compare these. They both look the same to me, so we can see that we’ve got a problem here.

|Again lets check the code.  Checking for the spellings.

|Ok I just found out the problem. If I go back to my database here, we see that I had added in this value myself and I had created this space at the end of this - you can see it highlighted in blue - I’ll just get rid of that quickly and I’ll come back to my page.

|So assuming my passwords do match, let me echo this success message.  

|I’ll just type in my old password, my new passwords 123 and 123, click change password, and we’ve got success.  

|So I apologise for that last slip-up there.

|Thanks for watching. This is Joshwa Mathew dubbing for the Spoken Tutorial Project.