Please Help PLZ PLZ PLZ

bradmasterx

Please help.

Warning: mysqli_num_rows() expects parameter 1 to be mysqli_result, boolean given in C:\wamp\www\learner\login.php on line 20

<?php
include 'config/settings.php';
$do=$_REQUEST['do'];
if($do == "check"){ 
$auth=$_SESSION['auth'];
if($auth == "YES"){
//Redirect
$redirect=$_REQUEST['redirect'];
header("location: $redirect"); }
else
{
header("location: index.php?loginerror=Please Login");
}
 }
 if($do == "login"){
 $user=$_REQUEST['user'];
 $pass=$_REQUEST['pass'];
 $sql="SELECT * FROM `users` WHERE user=$user AND pass=$pass";
 $result = mysqli_query($cxn, $sql);
 $num = mysqli_num_rows($result); //ERROR HERE
 if($num > 0){
 echo "Logged in";
 }}
?>

bradmasterx

I dont think my computer or host like mysql

Warning: mysqli_fetch_assoc() expects parameter 1 to be mysqli_result, boolean given in C:\wamp\www\learner\login.php on line 20

<?php
include 'config/settings.php';
$do=$_REQUEST['do'];
if($do == "check"){ 
$auth=$_SESSION['auth'];
if($auth == "YES"){
//Redirect
$redirect=$_REQUEST['redirect'];
header("location: $redirect"); }
else
{
header("location: index.php?loginerror=Please Login");
}
 }
 if($do == "login"){
 $user=$_REQUEST['user'];
 $pass=$_REQUEST['pass'];
 $sql="SELECT * FROM `users` WHERE user=$user AND pass=$pass";
 $result = mysqli_query($cxn, $sql);
 $row = mysqli_fetch_assoc($result);
 echo $row['user'];}

?>

rincewind456

You may want to do a bit of error checking to actually see if your query is returning a result, something like this

$result = mysqli_query($cxn, $sql)or die(mysqli_error());

bradmasterx

there is a error message

Warning: mysqli_error() expects exactly 1 parameter, 0 given in C:\wamp\www\learner\login.php on line 19

but there is data in the database

bradmasterx

I've added @ before every var and it works perfect thanks for your help

rincewind456

@ doesn't make it work, it just suppresses the error, so the underlying problem is still there.

The error message you get is a PHP error message that is usually generated because when you use mysqli_num_rows and mysqli_fetch_assoc and there is not a valid return from the query.

rincewind456

Also this line

$sql="SELECT * FROM `users` WHERE user=$user AND pass=$pass";

requires quotes around the $user and $pass to indicate to the sql server that they are strings

YAOMK

Just to make it clear, the at sign @ in php is used to suppress errors. Inside MySQL the at sign @ is used to declare user defined variables.