MySQL error

[2K8 Group]

Code:

    if (eregi('^[[:alnum:]\.\'\-]{4,30}$', stripslashes(trim($_POST['password']))) ) {
        $password = $_POST['password'];
        $password = mysql_real_escape_string($password);
        $result = mysql_query("SELECT * FROM users WHERE username= '$username', password = '$password'");
        $count = mysql_num_rows($result);
    }
    else {
        $errors[] = '<font color="red">Invaild Password</font>';
    } 
    if ($count==1) {
        //session_register("username");
        //session_register("password");
        $_SESSION["int_userid"]    =    user_id;
    }
    else {
        $errors[] = '<font color="red">Invaild Password or Username</font>';

I get this error:

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/group2k8/public_html/test_area/login.php on line 26

Can anyone help?

 

[marshian]

I'm 100% sure there's an error in your mysql query:
"SELECT * FROM users WHERE username= '$username', password = '$password'"
but i'm not sure about the solution... try
"SELECT * FROM `users` WHERE `username`= '$username' AND `password` = '$password'"

 

[2K8 Group]

Yeah that got it =)

 

[phpasks]

<?php

$link = mysql_connect("localhost", "mysql_user", "mysql_password");
mysql_select_db("database", $link);

$result = mysql_query("SELECT * FROM table1", $link);
$num_rows = mysql_num_rows($result);

echo "$num_rows Rows\n";

?>  
<?php
if (eregi('^[[:alnum:]\.\'\-]{4,30}$', stripslashes(trim($_POST['password']))) ) {
        $password = $_POST['password'];
        $password = mysql_real_escape_string($password);
        //$result = mysql_query("SELECT * FROM users WHERE username= '$username', password = '$password'");
$result = mysql_query("SELECT * FROM users WHERE username= '".$username."', password = '".$password."'", Connection link put here);  
        $count = mysql_num_rows($result);
    }
    else {
        $errors[] = '<font color="red">Invaild Password</font>';
    } 
    if ($count==1) {
        //session_register("username");
        //session_register("password");
        $_SESSION["int_userid"]    =    user_id;
    }
    else {
        $errors[] = '<font color="red">Invaild Password or Username</font>'; 
?>

You problem solved 100%
Because You can't use connection link in your query.

now do it.

 

[2K8 Group]

It was a sction of code, I did have the conection included so that wasn't the problem.

 

[marshian]

<?php

$link = mysql_connect("localhost", "mysql_user", "mysql_password");
mysql_select_db("database", $link);

$result = mysql_query("SELECT * FROM table1", $link);
$num_rows = mysql_num_rows($result);

echo "$num_rows Rows\n";

?>  
<?php
if (eregi('^[[:alnum:]\.\'\-]{4,30}$', stripslashes(trim($_POST['password']))) ) {
        $password = $_POST['password'];
        $password = mysql_real_escape_string($password);
        //$result = mysql_query("SELECT * FROM users WHERE username= '$username', password = '$password'");
$result = mysql_query("SELECT * FROM users WHERE username= '".$username."', password = '".$password."'", Connection link put here);  
        $count = mysql_num_rows($result);
    }
    else {
        $errors[] = '<font color="red">Invaild Password</font>';
    } 
    if ($count==1) {
        //session_register("username");
        //session_register("password");
        $_SESSION["int_userid"]    =    user_id;
    }
    else {
        $errors[] = '<font color="red">Invaild Password or Username</font>'; 
?>

You problem solved 100%
Because You can't use connection link in your query.

now do it.

Dude, problem solved is problem solved. If it works, then why start complaining about errors in code that's not even included? That's kinda annoying imo...