Script Error (Help!!)

[jonno946]

Anyone know whats wrong with this coding? i keep getting the error:

Warning: Supplied argument is not a valid MySQL result resource in /usr/local/psa/home/vhosts/pagadoo.com/httpdocs/forums/login/login.php on line 15
Invalid Username/Password

Heres the script:

<?php

$DBhost = "localhost";
$DBuser = "jdunn";
$DBpass = "pagadoo";
$DBname = "pagadoo";

session_start();

mysql_connect($DBhost,$DBuser,$DBpass) or die("Unable to connect to database");
mysql_select_db ($DBname);

if ($username && $password) {
$res = mysql_query("SELECT FROM pagadoo_users WHERE username='$username' AND password='". md5($password) ."'");
if(mysql_num_rows($res) != 0) {

session_register("logged_in");
$logged_in = "1";
$_SESSION["logged_in"] = "1";
} else {
print("Invalid Username/Password");
}
} else {
print("A Username and Password Must be entered!");
}

?>

Any more errors that you can see? Any suggestions would be good.

Jonathan

[Anon]

Try "SELECT * FROM .." instead of "SELECT FROM .."

[Anon]

Heres the script:

<?php

$DBhost = "localhost";
$DBuser = "jdunn";
$DBpass = "pagadoo";
$DBname = "pagadoo";

session_start();

<B>$cn = </B>mysql_connect($DBhost,$DBuser,$DBpass) or die("Unable to connect to database");
mysql_select_db ($DBname);

if ($username && $password) {
$res = mysql_query("SELECT FROM pagadoo_users WHERE username='$username' AND password='". md5($password) ."'",<B>$cn</B>);
if(mysql_num_rows($res) != 0) {

session_register("logged_in");
$logged_in = "1";
$_SESSION["logged_in"] = "1";
} else {
print("Invalid Username/Password");
}
} else {
print("A Username and Password Must be entered!");
}

?>

Changes I made are in <B>Bold</B> that should work fine.

Tommy

[jonno946]

GOOD WORK!!! MANY MANY THANX!!