Cheat Engine

[ElectroFusion]

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in C:\wamp\www\login_do.php on line 8
username/password was incorrect.

I entered the right info.. heres my login_do script

<?php
#include "dbc.php";
session_start();
$username = $_POST['username'];
$password = $_POST['password'];
$sql="SELECT * FROM accounts WHERE username='$username' and password='$password'";
$result=mysql_query($sql);
$count=mysql_num_rows($result);
if($count==1){
$_SESSION['username']=$username;
}else{
die ("username/password was incorrect.");
}

//Step 6
mysql_close();

//Step 7
echo "You have successfully logged in, please wait while we redirect you.";
header("Location: supertut.kicks-ass.org");
?>

[atom0s]

Your SQL query looks a little off and I think there are a few more mistakes. Try this instead:

[ElectroFusion]

same stuff, but on line 12 now

[Dark Byte]

or try this:

[ElectroFusion]

Dark Byte, your being an ass.

I modified the query to "SELECT * FROM accounts WHERE username = '.$username.' AND password = '.$password.'";

and it worked fine.

[Dark Byte]

really?
And you're also getting the expected results?

try this:
"SELECT * FROM accounts WHERE username = '".$username."' AND password = '".$password."'";

Didn't come to mind at the first post they are string fields, so require a string as input.

[ElectroFusion]

Sir, if your going to be doing " like

mysql_query("");

and inside the script you used more "s like

mysql_query("SELECT * FROM `ass` WHERE `constipated` = ".$answer." AND `hastoshit` = 1");

you would put /".$answer./" instead. I replaced it with

mysql_query("SELECT * FROM `accounts` WHERE username = '$username' AND password = '$password'");

You don't need the periods. Mysql+php is weird, but I guess this is how they roll.

Now im trying cookies

[Dark Byte]

keep in mind that there's a difference between " and ' quotes
I think quotes with ' do dereference a string like $username into a string, but quotes with " not, or it may be the other way arround.

and for cookies, try : setcookie("username", $username, time()+3600);

[ElectroFusion]

when im doing stuff like echo "<div id="dkd"></div>"; I prefer to use ' so it doesn't interfear [cant spell, 1 in the morning]

Now im using sessions AGAIN.. nyway. When I go to index it pretends im logged off:

index.php

[STN]

you have to include session_start(); at the top of pages where you want to use sessions.

[ElectroFusion]

Thank you STN, will try now.