[Resolved] Can't pull data from the database

bpat1434

I have the following script:

$user = $_REQUEST['username'];
$pass = $_REQUEST['pass'];
$password = md5($pass);

include('connection.php');

$query = "SELECT * FROM `members` WHERE `Username` = $user;";
echo('Logging in... Please wait....<br>');
echo($query.'<br>');
$result = mysql_query($query, $dbc) or die('<b>Unable to Find User</b><br>'.$user);

When I call the page to try and login, for some odd reason I get the following output:

Logging in... Please wait....
SELECT * FROM members WHERE Username = brett2;
Unable to Find User
brett2

I have checked the passwords, and they match. The user is in the database. Everything is there, but I just can't get the script to see it.

Any ideas?

Thanks for the help.

~Brett

devinemke

$query = "SELECT * FROM members WHERE Username = '$user'";

bpat1434

Ok. Thanks for the help.

Now I have it that I get a blank page.

I have the following script for if the login is successful:

if(($password == $dbPass) && ($user == $dbuser)){
	echo('Login Successful');

session_start();
session_register('login');
session_register('group');
$_SESSION['login'] = 'true';
$_SESSION['group'] = $group;

header("Location: http://winfieldvfd.org/admin/index.php");
}

Any ideas why it won't redirect to where I want?

Thanks.

~Brett

xblue

a few things

the "or die ..." statement is not executed when no user is found, it will only be executed if the query is syntactically incorrect (as it has been before you added devinemke's modification).
both with header() redirects and calls to session_start(), keep in mind that there must not be any output before you call them.

good luck!