Page 1 of 1

Mssql_query

Posted: Mon May 25, 2009 6:40 am
by mfuada
hi guys could you tell me where did i go wrong with this code , i managed to connect the php with sql server but when i want to do a login code... it always failed and give me a blank answer(it's like the php does not found the user id or password on the sql server)

Code: Select all

<?php
 
$dbusername='sa';
$dbpassword='password';
$servername='blank';
$link = mssql_connect($servername,$dbusername,$dbpassword);
$select_db=mssql_select_db("Office",$link);
$login_1="SELECT * FROM User_group WHERE Nama='$_POST[id_user2]' AND Password='$_POST[password2]'";
$login=mssql_query($login_1);
$ketemu=mssql_num_rows($login);
$r=mssql_fetch_array($login);
 
if($ketemu > 0) {
    session_start();
    
    session_register("namauser");
    session_register("passuser");
    
    $_SESSION[namauser]=$r[Nama];
    $_SESSION[passuser]=$r[Password];
    header('location:index_ok.php');
}
else {
        echo("Login failed! wrong username and password br>");
        echo("<a href=form_login.php> please try again</a>");
     }
?> 
thx

Re: Mssql_query

Posted: Fri May 29, 2009 7:12 am
by rabeehkm
Hi mfuada,

i think the problem is here.

Code: Select all

$login_1="SELECT * FROM User_group WHERE Nama='$_POST[id_user2]' AND Password='$_POST[password2]'";
do one thing,

Code: Select all

 
$user = $_POST["id_user2"];
$pass = $_POST["password2"];
$login_1="SELECT * FROM User_group WHERE Nama='$user' AND Password='$pass'";
You forgot to put quotes in $_POST. That may be the problem
.------
Rabeeh