// #php — 2008-06-04
1996
1997
1998
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
01:58:02 Quit: Lukian ([email protected]) Ping timeout: 121 seconds
02:00:39 Join: teza19 ([email protected]) to #php
02:00:41 <teza19> $pwResult = $_POST['password'];
02:00:42 <teza19> $userResult = $_POST['username'];
02:00:42 <teza19> //create and issue the query
02:00:43 <teza19> $sql = "select `f_name`, `l_name` from `auth_users` where `username` = '$userResult' AND `password` = password('$pwResult')";
02:01:01 <teza19> that returns 0 rows
02:11:29 <schnootop> i dont want to even start whats wrong with that :P. Just echo the full query and throw it into something like MySQL Query Browser and try it out in there
02:12:18 <teza19> I know what's wrong with it, someone can just drop the table from the query, but i cbf securing it as im only running it on my local machine and if i want to drop it, ill just do it through phpmyadmin
02:12:38 <teza19> I have run it in phpmyadmin and it returns 0 rows as well. Values are correct.
02:13:34 <schnootop> select password('$pwResult') as pwd from ..
02:13:44 <schnootop> i recon that the password might not be matching
02:14:13 <teza19> yer, it's not. I tried it without password and it works
02:14:46 Join: Lukian ([email protected]) to #php
02:26:18 Quit: Lukian ([email protected]) Ping timeout: 121 seconds
02:26:26 Part: teza19 ([email protected]) from #php
02:36:35 Quit: schnoodles ([email protected]) Ping timeout: 121 seconds
02:38:17 Quit: schnootop ([email protected]) Ping timeout: 121 seconds
02:38:52 Join: schnoodles ([email protected]) to #php
02:39:09 Join: schnootop ([email protected]) to #php
02:41:02 Join: Lukian ([email protected]) to #php
03:46:34 Quit: Lukian ([email protected]) Ping timeout: 121 seconds
04:01:18 Join: Lukian ([email protected]) to #php
06:43:32 Join: smythe ([email protected]) to #php
06:43:35 Mode: (by ChanOP) +o smythe
07:56:35 Quit: optimus ([email protected]) Quit: Sleep? Oh boy! That's where I'm a viking!
10:49:32 Join: drexen ([email protected]) to #php
10:49:37 Mode: (by ChanOP) +v drexen
11:05:34 Nick: drexen is now known as drexen[out[
13:11:33 Nick: drexen[out[ is now known as drexen
14:30:10 Quit: smythe ([email protected]) Ping timeout: 151 seconds
14:44:43 Nick: drexen is now known as drexen[out]
15:55:58 Quit: XIO ([email protected]) Connection reset by peer
17:33:05 Nick: drexen[out] is now known as drexen
17:48:51 Nick: drexen is now known as drexen[out]
19:32:26 Join: teranoid ([email protected]) to #php
21:45:39 Join: optimus ([email protected]) to #php
23:06:58 Quit: optimus ([email protected]) Quit: Sleep? Oh boy! That's where I'm a viking!
Search this day's buffer: