please look at this code
$nickname = $HTTP_POST_VARS["nickname"];
$password = $HTTP_POST_VARS["password"];
$result = mysql_query ("select * from login where nickname='$nickname' and passwd='$password'")
or die("Invalid query: " . mysql_error() );
if (!$result)
echo "Problem";
else
echo "Welcome " .$nickname;
i take nickname and password from a form and i have checked the names, its all ok but the script always return me "Welcome" .$nickname (even if I put a nickname that is not included in my database)
when I change the mysql query, I take an error...
what's wrong?? please help!