note 68655 deleted from function.mysql-real-escape-string by aidan
| From: | aidan@php.net | Date: | Sun, 24 May 2009 19:45:03 +0000 |
| Subject: | note 68655 deleted from function.mysql-real-escape-string by aidan | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-155938@lists.php.net to get a copy of this message | ||
Note Submitter: tomfmason at spammerssuck dot com
----
<?php
include ('includes/db.php');
array_pop($_POST);
if ( get_magic_quotes_gpc() ) {
$_POST= array_map('stripslashes', $_POST);
}
$username= mysql_real_escape_string(trim($_POST['username']));
$password= mysql_real_escape_string(trim($_POST['password']));
$mdpwd= md5($password);
$sql= sprintf("SELECT COUNT(*) AS login_match FROM
users WHERE
username = '%s' AND password= '%s'", $username,
$mdpwd);
$res= mysql_query($sql) or die(mysql_error());
$login_match= mysql_result($res, 0, 'login_match');
if ( $login_match == 1 ) {
//logged in
} else {
// not logged in
}
?>