how do i assign a value from DB to a variable?

mrjoseph_com

and then check it against a form entry?

<?PHP

$query_user = mysql_query("SELECT username FROM users where username = '$input_username' ");
$query_pass = mysql_query("SELECT password FROM users where password = '$input_password' ");



if (($user == $input_username)&($pass == $input_password)){
header('Location: index.php?true');

} else {
$_SESSION['name'] = array();
session_destroy();
echo header('Location: index.php?false');
}
?>

devinemke

$result = mysql_query("SELECT username, password FROM users where username = '$input_username' AND password = '$input_password'");
if (mysql_num_rows($result))
{
	$row = mysql_fetch_assoc($result);
	if ($user == $row['username'] & $pass == $row['password'])
	{
		header('location: [url]http://[/url]' . $_SERVER['HTTP_HOST'] . 'index.php?true');
	}
	else
	{
		$_SESSION['name'] = array();
		session_destroy();
		header('location: [url]http://[/url]' . $_SERVER['HTTP_HOST'] . 'index.php?false');
	}
}
else
{
	echo 'no record matching that username/password';
}

note: as per the manual, the header() function should be fed a full URL. in the above example i constructed one assuming that index.php is the doc_root. adjust as necessary if you paths are different.

mrjoseph_com

Thanks for the replay. I pasted the code into my php file and I got this error:

Warning: Wrong parameter count for mysql_num_rows() in c:\inetpub\wwwroot\php\login\login.php on line 23
no record matching that username/password

I also tried this and it worked fine with no errors apart from when it couldn't find the username and password:

$query_user = "SELECT username FROM users where username = '$input_username' ";
// $result_user = mysql_query($query_user);

// $query_pass = "SELECT password FROM users where password = '$input_password' ";
// $result_pass = mysql_query($query_pass);

//This is where you asign value to variable:

//$enter_user = mysql_result($result_user,0,'username');
//$enter_pass = mysql_result($result_pass,0,'password');
// if (($enter_user == $POST['username'])&($enter_pass == $POST['password'])){
// echo header('Location: index.php?true');
// } elseif
// (($enter_user == $POST['username'])&($enter_pass == $POST['password'])){
// $_SESSION['name'] = array();
// session_destroy();
// echo header('Location: index.php?false');
// }

mrjoseph_com

Got it working thanks!

if (mysql_num_rows( $results)){