I am baffled though, why didn't the original code 'work out of the box'? Is it something wrong with Wamp? Should I be using something else to do these tutorials with?

Thanks again.

list($count) = mysql_fetch_row($result);
if($count >= 1) { ?>

Move the following line:

<span style='color:red'>Error: that username is taken.</span>

to go inside my if block:

if($result) { ?>
<span style='color:red'>Error: that username is taken.</span>
<?php }

Notice that you now have two “else” blocks, delete the one closest to the if, the one which have no code inside the { }:

else {
}

—————–
The code should then look like this:
…..
$query = sprintf(”SELECT * FROM users WHERE username = '%s'”,
mysql_real_escape_string($_POST['username']));
$result = mysql_query($query);
if($result) { ?>
<span style='color:red'>Error: that username is taken.</span>
<?php } else {
$query = sprintf(”INSERT INTO users(username,password) VALUES ('%s','%s');”,
mysql_real_escape_string($_POST['username']),
mysql_real_escape_string(md5($password)));
mysql_query($query);
?>
<span style='color:green'>Congratulations, you registered successfully!</span>
<?php
}
}
}
?>

——————————–
<?php
if($_POST) {
$password = $_POST['password'];
$confirm = $_POST['confirm'];
if($password != $confirm) { ?>
<span style='color:red'>Error: Passwords do not match!</span>
<?php } else {
$dbhost = 'localhost';
$dbuser = 'root';
$dbpass = '';
$dbname = 'BBG';
require_once 'config.php';
$conn = mysql_connect($dbhost,$dbuser,$dbpass)
or die ('Error connecting to mysql');
mysql_select_db($dbname);
$query = sprintf(”SELECT * FROM users WHERE username = '%s'”,
mysql_real_escape_string($_POST['username']));
$result = mysql_query($query);
if($result) {
} else {
}
list($count) = mysql_fetch_row($result);
if($count >= 1) { ?>
<span style='color:red'>Error: that username is taken.</span>
<?php } else {
$query = sprintf(”INSERT INTO users(username,password) VALUES ('%s','%s');”,
mysql_real_escape_string($_POST['username']),
mysql_real_escape_string(md5($password)));
mysql_query($query);
?>
<span style='color:green'>Congratulations, you registered successfully!</span>
<?php
}
}
}
?>
<form method='post' action='register.php'>Username: <input type='text' name='username' />

Password: <input type='password' name='password' />

Confirm Password: <input type='password' name='confirm' />

<input type='submit' value='Register!' />
</form>
——————————

The error message has changed, now it says 'Warning: mysql_fetch_row() expects parameter 1 to be resource, boolean given in C:wampwwwBBGregister.php on line 22'.

Line 22 is this one: list($count) = mysql_fetch_row($result);

I know I've done something wrong, but I feel I'm very close to getting this working. Can you see where I've messed up?

$query = sprintf(”SELECT * FROM users WHERE username = '%s'”, mysql_real_escape_string($_POST['username'])));
$result = mysql_fetch_array(mysql_query($isuser));

Then I use a simple if statement to check if I got any data or not:
if($result) {
// User already exists
} else {
// User does not exist, safe to register if all input validates
}

$result is an array, and if the user exists in the DB I have data there and the if check returns true, if no data enters the array is empty and the if check returns false and runs the else statement instead.

<?php
$dbhost = 'localhost';
$dbuser = 'root';
$dbpass = '';
$dbname = 'db_name';
?>

Now it's working, but I'm getting a new error:

Warning: mysql_fetch_row() expects parameter 1 to be resource, boolean given in C:wampwwwBBGregister.php on line 19

This is line 19: list($count) = mysql_fetch_row($result);

I see that Marius had the same problem and managed to solve it, but he didn't post his solution .

Anybody have any ideas?

Warning: mysql_connect() [function.mysql-connect]: Access denied for user 'user'@'localhost' (using password: YES) in C:wampwwwBBGregister.php on line 12
Error connecting to mysql

I'm very new to this, so I'm not sure what I've done wrong.

This is what I've done so far, I'm using Wamp, so I created a new project folder in C:wampwww called BBG.

In phpMyAdmin I've created 3 tables “items, users and user_inventory”.

I'm using ConTEXT as my editor so I copied and pasted the whole code into it and saved it as register.php.

But I get the above error message when I try to register. What have I done wrong?

A random salt could be the md5 value of a random number.

$salt = md5(rand(11111, 99999));
$password = md5($password.$salt);

Be sure to store the $salt value in your db for later use, and to match the users password using that same salt every time.

For better security (as you store the random salt probably next to each user in your db) you could also have a fixed $salt2 stored in a non-accessible php file, and add that to every password:

include “non-accessible php file”;
$salt2 = “some-random-salt”;

$password = md5($password.$salt.$salt2);