If statement

[Anon]

if (isset($newpass)) {
echo $db = mysql_select_db("db",$con) or die("error");
$check = md5($newpass);
$sql = "UPDATE users set check = '$check' WHERE uname='$uname'";
$result = mysql_query($sql,$con) or die("error");
} else {
("nothing in the box");
}

This is my if statement, it is supposed to say if txt box $pass = "somethign in it" then update it. Else don't update the damn thing.
But it seems to update it either way..
Thanks
Anthony

[knickerlas]

if (isset($newpass && !$newpass==''))

Try that or something similar.

Nick

[rrijnders]

If the variable comes from a form, you can't use isset() because the variable will always be set when the cgi parses the form data; it will just be blank if nothing was entered.

If you want to check if there is something actually in the variable, use:
if (!empty($var)) { }

You can't use:
if ($var == ' ') {}
...because coming from a form, there might be blanks, newlines, CR, Tabs, etc. the empty() function discounts white space and is your cleanest bet. For good measure, I always run form vars through trim() before I do the comparison.

-- Rich Rijnders
-- Irvine, CA US