change from PDO to mysql

Question

How do I change the below to mysql? This is my authentication page.

I have tried changing but all it gives me is a blank page with no error. All my other pages are in mysql format and I don't want to use PDO.

require 'connect.php';

session_start();

$username = "";
$password = "";

if(isset($_POST['username'])){
    $username = $_POST['username'];
}
if (isset($_POST['password'])) {
    $password = $_POST['password'];

}

echo $username ." : ".$password;

$q = 'SELECT * FROM users WHERE username=:username AND password=:password';

$query = $dbh->prepare($q);

$query->execute(array(':username' => $username, ':password' => $password));


if($query->rowCount() == 0){
    header('Location: ind.php?err=1');
}else{

    $row = $query->fetch(PDO::FETCH_ASSOC);

    session_regenerate_id();
    $_SESSION['sess_user_id'] = $row['id'];
    $_SESSION['sess_username'] = $row['username'];
    $_SESSION['sess_userrole'] = $row['role'];

    echo $_SESSION['sess_userrole'];
    session_write_close();

    if( $_SESSION['sess_userrole'] == "admin"){
        header('Location: adminhome.php');
    }else{
        header('Location: userhome.php');
    }


}

use `ini_set('display_errors',1); ini_set('display_startup_errors',1); error_reporting(-1);` to check error in page !! — Saty, Sep 11 '15 at 08:49
I think you don't must change PDO to mysql , but you must to change mysql to PDO on all your code ^^ — Fky, Sep 11 '15 at 08:51
you are right #aldrin though i had created all my other pages using mysql :) ,that will require me change all of them to PDO. — flevian, Sep 11 '15 at 08:52
Take a look at this tutorial @flevian: [Roll your own PDO class](http://culttt.com/2012/10/01/roll-your-own-pdo-php-class/). Although it's a bit old, it's still perfectly fine. You'll find it an easy to understand tutorial and it will make updating your code a lot easier :) — icecub, Sep 11 '15 at 08:56

score 1 · Answer 1 · edited May 23 '17 at 11:44

I think you have a grave misunderstanding here.

As several people have pointed out in comments, you don't want to convert your code to use mysql_ -style functions. These functions have been deprecated since PHP 5.5.0. Setting this aside, it also needs to be used very carefully to avoid SQL injections.

I understand that for some reason you may not want to use PDO, in which case you do have options like mysqli. Please also see manual for other database abstraction layers.

My suggestion is that you:

Debug what's wrong with your login page.
Refactor your other pages to use something else than mysql_ functions.
Evaluate whether existing CMS or PHP frameworks would be more fit for your use case.

change from PDO to mysql

1 Answers1