mysql_num_rows error

[BIOSTALL]

Just a quickie for you

i have this

$un = ($_POST['username']);
$pw = ($_POST['password']);

if (mysql_num_rows(mysql_query("SELECT * FROM Forum_Users WHERE username = ".$un." AND password = ".$pw."",$connection))>0) {
	header("location:ForumMain.php");
}else{
	echo "Username and/or password incorrect<br><br>Click <a href='ForumLogin.php'>here</a> to try again";
}

but i get this error

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/virtual/site13/fst/var/www/html/ForumLoginCheck.php on line 12
I cant figure out whats wrong with it. Anyone see something that i'm missing??

Cheers, BIOSTALL

[devinemke]

your query is failing. use [man]mysql_error[/man] to find out why. i suspect it is your use (or lack of use) of quotes into your query syntax.

[BIOSTALL]

Thanks

the mysql_error says:

Unknown column 'biostall' in 'where clause

biostall being what i entered as the username

Anyone help me further please??

Thanks, BIOSTALL

[devinemke]

Originally posted by BIOSTALL
biostall being what i entered as the username

yes but biostall is a string and you are not surrounding it and your password with quotes in your query syntax.

[BIOSTALL]

Ok, would you mind explaining how this can be achieved :-S sorry, this is the first real time i have used num rows.

Your help is greatly appreciated. BIOSTALL

[devinemke]

mysql_query("SELECT * FROM Forum_Users WHERE username = '$un' AND password = '$pw'");

[BIOSTALL]

Thanks you so much 🙂 thats made my day :-P