Problems with md5()

[Studebaker]

I am trying to encrypt a private pin number by using the MySQL function md5(). I am unable to use this function and keep getting a failed query message back. Here's the code:

	$result = mysql_query("SELECT * FROM securepin
		    WHERE pinnum = md5('$pinnumber')");

if(mysql_num_rows($result) < 1)
{
	echo 'The Pin Number you entered is invalid';
	return false;
}

The password() function, on the other hand, works fine. But I want to use md5(). Ideas anyone?

[superwormy]

First, always do this:
$result = mysql_query("your query here") or die(mysql_error());

That way, you can see why MySQL doesn't like your query. If you've seen the failed query message already, what exactly does the failed query message say?

[Studebaker]

Well, technically, the error message is actually a success message that the query was executed successfully, which I don't want. I want the user to only be registered if they accurately enter a pin number which is given to them by the web administrator. The problem is that the script seems to bypass this whole stage and registers everyone, even if they don't enter the right pin number.