strtolower and checking in database

[kender]

why would this work...

$_POST['uname'] = strtolower($_POST['uname']);
$query = mysql_query("SELECT uname FROM user WHERE uname='$_POST[uname]' AND pword='$_POST[pword]'") or die(mysql_error());

but not this

$uname = strtolower($_POST['uname']);
$query = mysql_query("SELECT uname FROM user WHERE uname='$uname' AND pword='$_POST[pword]'") or die(mysql_error());

[cretaceous]

because this first line:
$POST['uname'] = strtolower($POST['uname']);
is not making sense

$POST['uname'] cannot be made equal to strtolower($POST['uname']);

it IS the posted value

so when you do
$query = mysql_query("SELECT uname FROM user WHERE uname='$POST[uname]' AND pword='$POST[pword]'")
it is using the POST value and not your strolower conversion

[bradgrafelman]

cretaceous wrote:

because this first line:
$POST['uname'] = strtolower($POST['uname']);
is not making sense

Sure it does. $_POST is a variable just like any other.

@: Did you try echo'ing out both SQL query strings (rather than simply executing them) to visually examine them? Do they look different?

[cretaceous]

sorry for muddying the waters there