User Authentication problems

curtisdw

I'm running a script where the user can login and update their info. I am able to get the username from a form, and pull the values from the database and display them in the form no problem. However when I add the password part of the query things go a little haywire.

Here is my original query
$query = "SELECT * FROM Practitioners WHERE Email='$loginName'";
$result = mysql_query($query)
or die ("Couldn't execute query.");
$row = mysql_fetch_array($result);
extract($row);

/ Display user address in a form / <-- all these statements execute properly

BUT when I change just the query to:
$query = "SELECT * FROM Practitioners WHERE Email='$loginName' AND Password=Password('$password')";

I get the error: Warning: extract(): First argument should be an array in /home/amcampp/public_html/show_userinfo.php on line 19
Line 19 is extract($row);
And the info from the database is not inserted into the form.

Any ideas? Thanks for your input

jweissig

hi,

You need to check and make sure you have a record returned after your query. I think that after you execute your script there is an empty results set returned and when you call extract() it does not have any records and returns an error.

In you example you say that

$query = "SELECT * FROM Practitioners WHERE Email='$loginName' AND Password=Password('$password')";

The password() encrypts the test into a one-way password possibly something is happening where it does not match and the error appears.

Use some error checking something like this..

$num_rows=mysql_num_rows($mysql_result); 

// We have no results 

if ($num_rows == 0) { 
echo "Sorry, we have no records"; 
} else { 

// We have  results so create a table to display the desired record 

}

hope this helps,
- justin

curtisdw

I know there is a record to return - that is what baffles me - before I add the part of the query that checks the password it brings the record perfectly - only afterward it gives me the error.

In the part Password=Password('$password'); I know that the first "Password" is the field name in my table, and the variable "$password" is the value passed from the form on the previous page.

Would the encryption make the value in the record and the value typed in the form not match?

This is stumping me