On Aug 28, 2007, at 10:03 AM, Daniel Brown wrote:

On 8/28/07, Jason Pruim <[EMAIL PROTECTED]> wrote:
[snip]
        $sql = "SELECT * FROM users WHERE user='".$user."' AND
pass='".$pass."' LIMIT 0,1;";
        $result = mysql_query($sql) or die("Wrong data supplied or
database error");
        while($row = mysql_fetch_array($result)) {

    Sounds to me like you're not getting through the while() clause,
meaning that there's no matching rows in the database.

    $sql = "SELECT * FROM login WHERE loginid='".$user."' AND
email='".$pass."' LIMIT 0,1;";

    Is the password they supply in the `email` column of the database?

Yes it is... For now... I am just using test/test and I had a field named password in the database but thought that was messing it up, so I dropped that field and currently I am just using the e-mail field as a password.

Once it works I'll change the field to a more appropriate selection with MD5 hashing, and maybe even a little salt in the hash. (Gotta add the flavor!)


--

Jason Pruim
Raoset Inc.
Technology Manager
MQC Specialist
3251 132nd ave
Holland, MI, 49424
www.raoset.com
[EMAIL PROTECTED]

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to