Login problem

[gop373]

This is login.php
<?php ob_start();
session_start();
//login.php
include("connect.php");
$sql="select * from login where username='$username'and password='$password'";
$result=mysql_query($sql);
$totalrow=mysql_num_rows($result);
if($totalrow>=1){
$row=mysql_fetch_array($result);
$id=$row[0]; //$row[0] is $row["id"]
session_register("id");
header("Location:hellomember.php");
?><br> <?}
else
{echo "Sorry";}
mysql_close($connect);
ob_end_flush();
?>

In MySQL is
id INT
username Varchar
password varchar

When I run login page I got message "Sorry" (I use correct username and password)

[planetsim]

Why not echo out the mysql_num_rows() result to see why.

[LordShryku]

My guess would be because username and "and" aren't spaced. [man]mysql_error[/man] would tell you that.

[planetsim]

Hmm as he has the single quote there it wouldnt matter if there was no space or 100spaces if im right mysql doesnt worry to much about spacing.

But yes your right about needing a mysql_error() needed although when it goes on the production server it should be taken out.

[gop373]

Why I got 0 when I echo $totalrow;
I sure that I type the correct username and password