Member Avatar for Eagle.Avik

why is the code below is not working?

$sql = "SELECT password, fullname, active FROM ".$mysql_table."";
   $sql = $sql . "WHERE username = :username, password = :password";
   $statement = $pdo->prepare($sql);
   $statement->bindValue(':username', $_POST['username']);
   $statement->bindValue(':password', md5($_POST['password']));
   $statement->execute();
  • 2 Contributors
  • 2 Replies
  • 553 Views
  • 8 Hours Discussion Span
  • Latest Post Latest Post by minitauros
Member Avatar for Eagle.Avik

solved it with

$sql = "SELECT password, fullname, active FROM ".$mysql_table." WHERE username = :username AND password = :password";
   $statement = $pdo->prepare($sql);
   $statement->bindValue(':username', $_POST['username']);
   $statement->bindValue(':password', md5($_POST['password']));
   $statement->execute();
Member Avatar for minitauros

Wasn't working because your "WHERE" got glued right onto the name of your table so it seems :).

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.