Newbie MySQL Statement Question

[Anon]

Hi

Can any1 hell me whats wrong with this:

$sql="SELECT * FROM user WHERE username='$username' AND password='". md5($password) ."' AND usergroupid='5' or '6' or '7' or '8'";

thanx

Jonathan

[[deleted]]

this is wrong:

usergroupid='5' or '6' or '7' or '8'

Read some more about SQL syntax:
http://www.mysql.com/doc/S/E/SELECT.html
http://www.mysql.com/doc/F/u/Functions.html

[Anon]

Thats made everything twice as comlicated! Do you know the correct code?

Jonathan

[[deleted]]

$sql="SELECT *
FROM user
WHERE username='$username'
AND password='". md5($password) ."'
AND (usergroupid=5 or usergroupid=6 or usergroupid=7 or usergroupid=8)";

or

$sql="SELECT *
FROM user
WHERE username='$username'
AND password='". md5($password) ."'
AND usergroupid IN (5,6,7,8)";