Just having a few questions submitting the login form via ajax, I am primarily a PHP developer, I do not use Jquery + Ajax, which is often the case with PHP.
For now, if I check the Firebug POST data after submitting the form, it seems to get the username and password that were added to the form, however the page just reloads, regardless of whether the incorrect username and password are added or if they are correct, and no session is created.
This is the form:
<form id="loginform" method="post"> Username: <input type="text" name="username" id="username" value=""> Password: <input type="password" name="password" id="password" value=""> <input type="submit" name="loginsub" id="loginsub" value="Login"> </form>
This is Ajax / JQuery:
<script type="text/javascript"> $(document).ready(function() { $('#loginform').submit(function() { $.ajax({ type: "POST", url: '/class/login.php', data: { username: $("#username").val(), password: $("#password").val() }, success: function(data) { if (data === 'Login') { window.location.replace('/user-page.php'); } else { alert('Invalid Credentials'); } } }); }); }); </script>
And this is PHP:
class Users { public $username = null; public $password = null; public function __construct( $data = array() ) { if( isset( $data['username'] ) ) $this->username = stripslashes( strip_tags( $data['username'] ) ); if( isset( $data['password'] ) ) $this->password = stripslashes( strip_tags( $data['password'] ) ); } public function storeFormValues( $params ) { $this->__construct( $params ); } public function Login() { $success = false; try{ $con = new PDO( DB_DSN, DB_USERNAME, DB_PASSWORD ); $con->setAttribute( PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION ); $sql = "SELECT * FROM users WHERE username = :username AND password = :password LIMIT 1"; $user = username; $stmt = $con->prepare( $sql ); $stmt->bindValue( "username", $this->username, PDO::PARAM_STR ); $stmt->bindValue( "password", md5($this->password), PDO::PARAM_STR ); $stmt->execute(); $valid = $stmt->fetchColumn(); if( $valid ) { $success = true; session_start(); session_regenerate_id(); $_SESSION['user'] = $user['user']; session_write_close(); echo ('Login'); exit(); } $con = null; return $success; }catch (PDOException $e) { echo $e->getMessage(); return $success; } }
I think this does not work because I do not name the class and function, but I am not sure how to do it. I tried to create a controller page between the two that will initiate the php class and function, but to no avail.
Just for editing, the login works correctly if I remove ajax and just call the php page using the login form action.
Any ideas?