Ad:

PHP Discussion Thread
Unsolved
Views: 371

Mar 19th, 2010

hi i am new to php i am getting the following error. i not getting wer the error.

Expand Post »

PHP Syntax (Toggle Plain Text)
----Query was empty---
at
---$sql="SELECT * FROM users WHERE username='$username' AND password='$password'";
    $result=@mysql_query($sql) or die(mysql_error()); ---
 
 
<html>
<body>
<form action="login.php" method="post">
<div>
<table width="100%">
<tr>
<td><img src="Logofinalcopy.gif"></td>
</tr>
<tr>
<td bgcolor="aqua"><h2>Login</h2></td>
</tr></table>
<table align="right" style="width:40%">
<br>
<tr>
<td>username:</td>
<td><input type="text" name="username"></td>
</tr>
<tr>
<td>password:</td>
<td><input type="password" name="password"></td>
</tr>
<tr>
<td align="CENTER" COLSPAN="4">
<input TYPE="SUBMIT" name="submit" value="Login">
<input TYPE="reset" name="submit" value="clear"></td>
</tr>
</table>
</div>
</form>
</body>
</html>
<?php
if(isset($_POST['submit']))
{
 $con = @mysql_connect("10.70.1.50","invensis","invensis");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }
 $con_db=@mysql_select_db("database_myproject",$con);
if (!$con)
  {
  die('Could not connect DB: ' . mysql_error());
  }
 
  $username=$_POST['username'];
  $password=$_POST['password'];
 
  $username = stripslashes($username);
  $password = stripslashes($password);
  $username = mysql_real_escape_string($username);
  $password = mysql_real_escape_string($password);
 
  $flag="OK";  
  $msg=""; 
 
 if(strlen($username) < 1)
   {
          $msg=$msg."Please enter the username<br>";
          $flag="NOTOK"; 
   }
 if(strlen($password) < 1)
   {
        $msg=$msg."Please enter the password<br>";
        $flag="NOTOK";  
   }
  if($flag <>"OK")
  {
  echo "<strong style='color:#FF3333'>"."<left >Please enter Username or Password  </left>"."</strong>";
  }
  else
    {
    $sql="SELECT * FROM users WHERE username='$username' AND password='$password'";
    $result=@mysql_query($sql) or die(mysql_error()); 
 
    $count= mysql_num_rows($result);
    echo "$count";
    if($count==1)
       {
            $sql = mysql_query("SELECT role FROM users WHERE username='$username' AND password='$password'");
            while($info = @mysql_fetch_array($sql))
            {
                if($info['role']=='Super Admin')
                {
                    @header('location: <a rel="nofollow" href="http://localhost/Project/Superadmin.php');" target="_blank">http://localhost/Project/Superadmin.php');</a>
                } 
                else if($info['role']=='Admin')
                {
                    @header('location: <a rel="nofollow" href="http://localhost/Project/Admin.php');" target="_blank">http://localhost/Project/Admin.php');</a>
                } 
                else if($info['role']=='User')
                {
                    @header("location: http://localhost/Project/User.php");
                } 
            }    
 
        } 
        else 
        {
            echo "<strong style='color:#FF3333'>Incorrect User Name OR Password</strong>";
        }
 
}
}
?>
----Query was empty---
at
---$sql="SELECT * FROM users WHERE username='$username' AND password='$password'";
    $result=@mysql_query($sql) or die(mysql_error()); ---


<html>
<body>
<form action="login.php" method="post">
<div>
<table width="100%">
<tr>
<td><img src="Logofinalcopy.gif"></td>
</tr>
<tr>
<td bgcolor="aqua"><h2>Login</h2></td>
</tr></table>
<table align="right" style="width:40%">
<br>
<tr>
<td>username:</td>
<td><input type="text" name="username"></td>
</tr>
<tr>
<td>password:</td>
<td><input type="password" name="password"></td>
</tr>
<tr>
<td align="CENTER" COLSPAN="4">
<input TYPE="SUBMIT" name="submit" value="Login">
<input TYPE="reset" name="submit" value="clear"></td>
</tr>
</table>
</div>
</form>
</body>
</html>
<?php
if(isset($_POST['submit']))
{
 $con = @mysql_connect("10.70.1.50","invensis","invensis");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }
 $con_db=@mysql_select_db("database_myproject",$con);
if (!$con)
  {
  die('Could not connect DB: ' . mysql_error());
  }

  $username=$_POST['username'];
  $password=$_POST['password'];

  $username = stripslashes($username);
  $password = stripslashes($password);
  $username = mysql_real_escape_string($username);
  $password = mysql_real_escape_string($password);

  $flag="OK";  
  $msg=""; 
     
 if(strlen($username) < 1)
   {
          $msg=$msg."Please enter the username<br>";
          $flag="NOTOK"; 
   }
 if(strlen($password) < 1)
   {
        $msg=$msg."Please enter the password<br>";
        $flag="NOTOK";  
   }
  if($flag <>"OK")
  {
  echo "<strong style='color:#FF3333'>"."<left >Please enter Username or Password  </left>"."</strong>";
  }
  else
    {
    $sql="SELECT * FROM users WHERE username='$username' AND password='$password'";
    $result=@mysql_query($sql) or die(mysql_error()); 

    $count= mysql_num_rows($result);
    echo "$count";
    if($count==1)
       {
            $sql = mysql_query("SELECT role FROM users WHERE username='$username' AND password='$password'");
            while($info = @mysql_fetch_array($sql))
            {
                if($info['role']=='Super Admin')
                {
                    @header('location: <a rel="nofollow" href="http://localhost/Project/Superadmin.php');" target="_blank">http://localhost/Project/Superadmin.php');</a>
                } 
                else if($info['role']=='Admin')
                {
                    @header('location: <a rel="nofollow" href="http://localhost/Project/Admin.php');" target="_blank">http://localhost/Project/Admin.php');</a>
                } 
                else if($info['role']=='User')
                {
                    @header("location: http://localhost/Project/User.php");
                } 
            }    
        
        } 
        else 
        {
            echo "<strong style='color:#FF3333'>Incorrect User Name OR Password</strong>";
        }
      
}
}
?>

Last edited by nav33n; Mar 19th, 2010 at 2:58 am. Reason: Use [code][/code] tags to wrap your code for easy readability.

Similar Threads

niths

Reputation Points: 9

Solved Threads: 2

Posting Whiz in Training

Offline

299 posts
since Mar 2010

Permalink

Mar 19th, 2010

Re: hi i am new to php i am getting the following error. i not getting wer the error.

hi

Your query will come like

"$sql="SELECT * FROM users WHERE username='".$username."' AND password='".$password."'";

Please try with this one and let me know if still any problem comes

phpuser

Reputation Points: 11

Solved Threads: 7

Junior Poster in Training

Offline

55 posts
since May 2008

Permalink

Mar 19th, 2010

Re: hi i am new to php i am getting the following error. i not getting wer the error.

Hiiee

Use This Query

PHP Syntax (Toggle Plain Text)
$sql="SELECT * FROM users WHERE username="'.$username.'" AND password="'.$password.'" ";
$sql="SELECT * FROM users WHERE username="'.$username.'" AND password="'.$password.'" ";

InStead Of This

PHP Syntax (Toggle Plain Text)

$sql="SELECT * FROM users WHERE username='$username' AND password='$password'";

Check & Let Me Know If U Find Anything Else.

Do It For All Queries In Ur File. That Will Work.

Thanks.
ScmSimplyBest

Last edited by scmsimplybest; Mar 19th, 2010 at 3:24 am.

scmsimplybest

Reputation Points: 10

Solved Threads: 0

Newbie Poster

Offline

8 posts
since Aug 2009

Permalink

Mar 19th, 2010

Re: hi i am new to php i am getting the following error. i not getting wer the error.

Do one thing ,

echo you $sql variable in your script then write die(); so when you run code you will see that query only.

Now take that query and run it in PHPMYADMIN and check is it right or your get result from same ??

may be you can get some idea wheres the problem is ?

Best luck..

phpuser

Reputation Points: 11

Solved Threads: 7

Junior Poster in Training

Offline

55 posts
since May 2008

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.

Previous Thread in PHP Forum Timeline: include issues

Next Thread in PHP Forum Timeline: Get time and date like google??

DaniWeb Message

Cancel Changes