sql password function

Anon

hey!

i just want to store usernames and passwords in a simple mysql-db. therefore i encrypt the password in the database with the password()-sql-function. but if i send the following query to the db, there's no resultset found:

$myResult = @("SELECT * FROM clients WHERE user=\"$var_user\" AND pass=PASSWORD(\"$var_pass\")");

(var_user and var_pass are the variables send to the script by my form.)

any suggestions?
(i used this before and it worked. maybe it's a php/mysql-configuration problem?)

thanks a lot.
a

parena

First rule in debugging: get rid of the @ sign...

Addition to the Firs rule in debugging: print your query...

And print mysql_error

Anon

ok, forget about the @ (i deleted it for debugging).
the printed query just looks fine, as well:

SELECT * FROM clients WHERE user="myUser" AND pass=PASSWORD("myPass")

mysql_error() returns an empty string, this means, theres no mysql-error, doesn't it?

all ideas are gone..

"INSERT INTO clients (user, pass) VALUES ('test',PASSWORD('test'))" just works fine. after that query there's the right entry in the db.
i really don't get it. please let me know, if anybody got some ideas.

thx.
arndt

parena

Does it work if you do a SELECT * FROM clients WHERE user="test"; ?

or just use ...WHERE pass=PASSWORD("test"); ?

Anon

it's only the password()-function, that doesn't work. if i just use WHERE pass="test" it works fine..

but the password function does work in an INSERT statement. ahhhh... 😉