需要正确的代码为这个SQL [英] need right code for this sql

问题描述

dosnt检查数据库是否验证

dosnt check the DB for validation

<?php

$host="host";
$username="username";
$password="password";
$db_name="database";
$tbl_name="users";

mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");

$login=$_POST['login'];
$pass=$_POST['password'];

$login = stripslashes($login);
$pass = stripslashes($pass);
$login = mysql_real_escape_string($login);
$pass = mysql_real_escape_string($pass);

$sql="SELECT FROM users WHERE user and pass";
$result=mysql_query($sql);

$count=mysql_num_rows($result);

if(count==1){
session_register("login");
session_register("pass");
header("location:loginsuccess.php");
}
else {
echo "Wrong Username or Password";
}

?>

推荐答案

host = host;

host="host";

用户名= username;

password = password;

password="password";

这篇关于需要正确的代码为这个SQL的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！