sql - mysql_query() error in PHP form -


so use program in php own way , told me start using way. of course caused me few mistakes. code:

<?php  function signin() { $con = mysqli_connect('localhost','root','avi1574','test'); if (mysqli_connect_errno()) {   echo "failed connect mysql: " . mysqli_connect_error(); } session_start(); if(!empty($_post['user_w']))  {  $query = mysql_query($con, "select * `users` `user` = '$_post[user_w]' ,  password = '$_post[pass_w]'") or die(mysql_error());  $row = mysql_fetch_array($query) or die(mysql_error()); if(!empty($row['user']) , !empty($row['password'])){      $_session['user_w'] = $row['password'];  echo "logged in.";  } else{  echo "sorry, wrong password."; } }} if(isset($_post['submit'])){      signin();  }  ?> <h1>my login page</h1> <form action="tsql.php" method="post" > <input type="text" name="user_w" size="20"></input> <input type="password" name="pass_w" size="20"></input> <button type="submit" name="submit">sumbit</button> </form>

when submit form following error: warning: mysql_query() expects parameter 1 string, object given in test-main/htdocs/test/tsql.php on line 10

line 10 is: $query = mysql_query($con, "select * fromuserswhereuser= '$_post[user_w]' , password = '$_post[pass_w]'") or die(mysql_error());

thank in advance!

many bad practice in there, let me point out few things.

$_post[pass_w]

this doesn't work pass_w not constant. see this article. must use quotes index: $_post['pass_w'].

you open sql injection , should use prepared statements.

you can't mix mysqli , mysql. don't use mysql_ functions, not secure , deprecated.

to error message, trying put resource mysql_query function expects query string, select.... must switch parameters.

when doing selects password , username, ensure case sensitivity using binary , put limit 1 @ end, ensure 1 record in return.

select * ... binary username = ... limit 1

also use hashing function (not sha1 , not md5 please :-) password, salt!


Comments

Post a Comment

Popular posts from this blog

javascript - Jquery show_hide, what to add in order to make the page scroll to the bottom of the hidden field once button is clicked -

i have button on website when clicked, reveals map. button can seen when page first loads up, when clicked, section holding map slides open , goes out of screen since page loads @ top (normal). want page scroll down bottom of div select when button pushed, if map out of screen. if page scrolled down, , clicks show map button, don't want page jump bottom of map. i tried figure out myself, no luck. seasoned jquery coders able give me guidance? many thanks! map = mapdiv.gmap3("get"); infobox = new infobox({ pixeloffset: new google.maps.size(-220, -310), closeboxurl: '', enableeventpropagation: true }); mapdiv.delegate('.infobox .close','click',function () { infobox.close(); }); jquery(".slidingdiv").hide(); jquery(".show_hide").show(); jquery('.show_hide').click(function(){ lastcenter=map.getcenter(); jquery(".slidingdiv...
Read more

python - Django-cities exits with "killed" -

i trying install django-cities on server 500mb ram. whenever run: manage.py cities the system exits saying killed. trying run: manage.py cities --import=country --force worked, guessing matter of running out of memory. to bypass, tried refer package local copy of cities' data file. still didn't work. any ideas on how can migrate data without having increase memory on server? based on suggestion comments, solved setting temporary swap file. if unfamiliar it, can follow these steps: set swap file touch /var/swap.img chmod 600 /var/swap.img set swap file size cd /var dd if=/dev/zero of=/var/swap.img bs=1024k count=1000 this create 1gb swap file. prepare disk image mkswap /var/swap.img activate swap memory swapon /var/swap.img once done, can turn off swap image: swapoff /var/swap.img more information on virtual memory , swap files can found here: https://www.digitalocean.com/community/tutorials/how-to-configure-virtual-me...
Read more

python - How to get a widget position inside it's layout in Kivy? -

i have gridlayout , added image widgets on after adding of images want draw rectangle in each image using canvas couldn't because don't know exact image widgets positions on gridlayout. code: http://paste.ofcode.org/3bdp9yhjrcrzmsztbu9hqp4 http://paste.ofcode.org/3az3gx4fxzr9dlhe2ami97c in last line of python code : rectangle(pos = (child.x - 2.4, child.y + 467), size = (70, 70)) how draw rectangle in child(my method not good^), also why gridlayout not coming in center after setting it's pos_hint = {"center_x" : .5}? if understand question right, try use such methods to_local() , to_parent() , to_widget() , to_window() . try substract position of gridlayout widgets' positions.
Read more