从行中获取特定的ID

Question

The program is a part from a login. At first it reads the database. Afterthen it reads a row until it gets the value of the ID. Then I wanna put that value in a Session.

The problem is when I wanna log in, I get everytime an error message, "wrong email/password".

Where could be the problem? I haven't encrypted the password yet, it will be done after it works everything.

 <_?php

if(isset($_POST['sbmt'])){
    $login = mysqli_real_escape_string(htmlspecialchars($_POST['login']));
    $pswd =  mysqli_real_escape_string(htmlspecialchars($_POST['pswd']));
            $id =  $_POST['id'];

           if(validateData($login, $pswd) === true){

                    $_SESSION['logedIn'] = true;

           header("Location: index.php");

            }else{
        $_SESSION['logedIn'] = false;
        echo 'Wrong Email/Password';
    }
}

function validateData($login, $pswd){
    if(strlen($login) > 0 && strlen($pswd) > 0){
        $result = mysqli_query("SELECT id,name FROM register WHERE email='$login' && password='$pswd'") or die(mysqli_error());

               while($row = mysqli_fetch_array($result)) {
                             if (isset($_SESSION['logedIn'])) {
                             $_SESSION['logedIn'] = $row['id'];
                             } else {
                               return false;
                               }

                               break;
            echo '<newarial>' . $row['id'] . '</newarial>';  }

                    if($row === false){
            return false;
        }else{
            return true;
        }
    }else{  
        return false;
    }
}
?_>_

Answer 1

thats because you are checking for session logedIn and it's just not there yet so your function validateData returns false every time

 if (isset($_SESSION['logedIn'])) {
                             $_SESSION['logedIn'] = $row['id'];

You could do something like this:

function validateData($login, $pswd){
    $link = mysqli_connect("host", "username", "password", "database") or die("cannot connect"));

    if(strlen($login) > 0 && strlen($pswd) > 0){
        $result = mysqli_query($link, "SELECT id,name FROM register WHERE email='$login' && password='$pswd'") or die(mysqli_error());

               if (mysqli_num_rows($result) !=1) {
                   return false;
               }

               $result = mysqli_fetch_array($result);
               $_SESSION['userId'] = $row['id'];
               $_SESSION['userName'] = $row['name'];
               return true;
    }
    return false;
}