can't get PASSWORD() to work

ragefu

I'm trying to make just a basic db login. The passwords in the db are already stored using PASSWORD(). When I try to execute the following:

SELECT * FROM tbl_admin WHERE user='admin' AND pass=PASSWORD('pass');

This does not return any results. Is there something wrong with my select statement? I don't think I used PASSWORD() correctly but it looks fine to me.

terrabull

What does the row look like on the db?

ragefu

user_id | user | pass

1 nick 73f607e2452bd71

terrabull

Do you use user='admin' or
user_id='admin' ?

suntra

Shouldn't it look like this ?

SELECT * FROM tbl_admin WHERE user='admin' AND pass=PASSWORD('[B]$pass[/B]');

ragefu

Yes yes sorry this is exactly how its set up.


SELECT * FROM tbl_admin WHERE user='$user' AND pass=PASSWORD('$pass');

Datebase example:

user_id | user | pass

datahere | datahere | datahere

password inserted with PASSWORD()
user_id is just an Auto_Increment
user and pass are VARCHAR(15)

But the point i am getting at is that my query doesnt return results when using a valid username and password in $user and $pass. This should work and i just dont know what i am doing wrong?

My code



if (isset($_POST['submit'])) {

 $strUser = $_POST['user'];
 $strPass = $_POST['pass'];


 if($strUser && $strPass) {
      if (mysql_connect("localhost", "username", "password")) {
           if (mysql_select_db("database")) {  

                 $sql = "SELECT * FROM tbl_admin WHERE user = '$strUser' AND pass = PASSWORD('$strPass')";
                 $result = mysql_query($sql);


                 if (mysql_num_rows($result)==1) {  
                      echo("Welcome!");
                }else{
                      echo("NO SOUP FOR YOU!");
                }
          }
       }
   }

martyn

You connected to the right Database?

ragefu

of course. the right database and the right table and the right server and so on and so forth. I just dont get why it doesnt work.

suntra

If you print in the page the username and the password, are they ok ? (Print something like "|$username|" to see if there are extra spaces...)