MYSQL is about to Get SHOT!

[Anon]

This is driving me NUTS!!!!
i need this line to be NOT EQUALS
if ($Username == $userid) { ?>

BUT ive tried everything!!
if ($Username != $userid) { ?>
if ($Username <> $userid) { ?>
if ($Username !== $userid) { ?>
AND I KNOW it works cause i have THIS on another not so distant page working
if ($Password <> $Password2)

HERE is my code and If you can figure this out i will be extremely greatful.

<?
include("config.php");

$Link = mysql_connect ($Host, $DBUser, $DBPass);

$Query = "SELECT * from my_table";
$Result = mysql_db_query ($DBName, $Query, $Link);

while ($UserInfo = mysql_fetch_array($Result)) {
$userid=$UserInfo[USERID];
if ($Username != $userid) { ?>
<!-- begin Username Taken Code -->

<form method="POST" name="signup" action="resetpw2.php">

<font face="Arial" size="2" color="#FF0000">THIS WHERE YOU GO IF YOU PUT IN A BAD USERNAME</font><br>
<input type="text" name="Username" value="" style="background:#D7D7D7" size="9" maxlength="64"><font face="Arial" size="2">&nbsp;@domain.com</font>&nbsp;</td>
<input type="submit" name="signup" value="Submit"><? ;exit ?>

<?
} else {
}
}
?>

<form method="POST" name="signup" action="resetpw2.php">

<font face="Arial" size="2" color="#FF0000">THIS WHERE YOU GO IF YOU PUT IN A GOOD USERNAME</font><br>
<input type="text" name="Username" value="" style="background:#D7D7D7" size="9" maxlength="64"><font face="Arial" size="2">&nbsp;@domain.com</font>&nbsp;</td>
<input type="submit" name="signup" value="Submit"><? ;exit ?>

[brandonschnell]

if (strcmp ($Username, $userid) != 0)
{
bad username
}
else
{
correct username
}

http://www.php.net/manual/en/function.strcmp.php

[Anon]

okay well heres one more issue.. how can i display a praticular field to a user based on the variables recieved from a form?

Liek Show hintQ where Username = hintQ or somthing? I really dunno how to do this at all..

Thansk for any help.

[brandonschnell]

there are several ways to do this.

$username = "user supplied username";
$password = "user supplied password";

$query = "SELECT username, password, hint FROM table WHERE username = '" . addslashes($username) . "'";
$result = mysql_db_query($query);

if ($row = mysql_fetch_object($result))
{
if (!strcmp ($password, $row["password"))
{
echo "hi $row->username! back for more?";
}
else
echo "invalid password. hint: $row->hint";
}
else
echo "user name not recognized";

[Anon]

I suggest the following if the password isn't encrypted.

$query = "SELECT username, password, hint FROM table WHERE username = '" . addslashes($username) . "' AND password = '".addslashes( $password )."'";

if( ( $result = mysql_db_query( $query ) ) && mysql_num_rows( $result )){
echo 'User is recognized.';
}else{
$row = mysql_fetch_object( $result );
echo 'Login Failed';
// Do something with the $row->hint;
}

Don't show the password hint, it can open the door to anyone. It better be mailed to the user's alternative e-mail address, which the user provided at the time of signup.