RE: [PHP-WIN] proofing login success using sessions

2010-04-23 Thread Warren Vail
Alexander, I'm sorry if this sounds like I'm picking on you, but there are a couple of things you might consider. If someone can somehow get hold of your table they've got all the passwords for all your users. A second item is if your use of positional references when linking to columns in the t

[PHP-WIN] proofing login success using sessions

2010-04-23 Thread Alexander Schunk
Hello, i have certain fields in a database including username and passwort. The username and passwort are in the first two fields of the database. Now, on the login page, i want to check the username and passwort provided by the user with the values in the database. I have the following code:

Re: [PHP-WIN] Problem with php and MySQL: inserting strings into database

2010-04-23 Thread Toby Hart Dyke
Apart from Warren's excellent advice, the source of your problem is things like this: '$_POST['vorname']' How is PHP supposed to know that this is nested parentheses? You should have done it like this: "$_POST['vorname']" Though of course, follow Warren's advice, and don't do it like this a