[Resolved] sql error

[helz]

this is the code i got to check to see if the user has entered in the correct login information or not. but i get the error:

Error performing query: You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

$result = @mysql_query("SELECT username, password FROM ".$membertable."");
    if (!$result) {
    echo("<p>Error performing query: " . mysql_error() . "</p>");
    exit();
    }

while ( $row = mysql_fetch_array($result) ) {
    $usertest = $row["username"];
	$passtest = $row["password"];

if ($_POST['user_name'] !== $usertest) { $flag==0 }
elseif (($_POST['user_name'] == $usertest) && ($_POST['pass_word'] !== $passtest)) {$flag=2;}
elseif (($_POST['user_name'] == $usertest) && ($_POST['pass_word'] == $passtest)) {$flag=1;}
}
if ($flag==0) {
	die("You entered an incorrect username.");
    }
elseif ($flag==2) {die("You entered an incorrect password for this username: ".$usertest."");}
elseif ($flag==1) {
$user==$_POST['user_name'];
$pass==$_POST['pass_word'];
}

mysql_close($cid);

[stolzyboy]

change this

$result = @mysql_query("SELECT username, password FROM ".$membertable."");

to this

$result = @mysql_query("SELECT username, password FROM '" . $membertable . "';");

[helz]

same error:
the thing is, that its using the same coding as another script that ive got that works perfectly.

its just baffling why it dont work...

[stolzyboy]

is this on the same server, do you need to use $_POST['membertable'] instead

[helz]

thanks for your help but i think i got it.

maybe i should learn that if the query is in a function i have to grab the global var that is $member table

added this:
global $membertable;

no more errors, sorry again 😃

i used to think that any vars defined out of the functions was automatically globalised so anywhere in the script you could access them, i suppose in a function you can have multiple vars of the same name but they dont cross each others paths