query problem...?

[mateo1221]

Can someone tell me what's wrong w/ this code? It goes to the "username and password invalid" block every time I test it (although that may just be the input I'm using..) the input comes from an html form...

$query = "SELECT f_name, l_name, password, status FROM members WHERE id_no = " . $id_no
or die ("Incorrect username. Please <a href=\"javascript.go(-1)\">go back</a>");

$result = mysql_query($query, $connect);

$result_arr = mysql_fetch_array($result);

if ($result_arr[id_no] == $id_no && $result_arr[password] == $password && $result_arr[status] <= 1)
{
echo "<h1 align=\"center\">Administrator Add Member Page</h1>";
            }
else
{
	if (status > 1)
		echo "Your status is not great enough to modify member database.";
	else
		echo "Your user name and password are invalid.  Please <a href=\"javascript.go(-1)\">go back</a> to retry.";
}

[ir4z0r]

values retrieved by a form have to be taken with $_POST['var']

be aware of using quotes (") when comparing strings

if ($password == "secret") ...

if using associative arrays, put the key in single quotes (')

$row['password']

[dptalon135]

I noticed in your first if statement, you used $result_arr[id_no], which as far as I can see, does not exist. Add id_no to the SELECT part of your query.

[YappyDog]

if (status > 1)

needs to have a dollar sign ($) before the variable name.....

if ($status > 1)

[mateo1221]

Thanks so much! got it now...