[SOLVED] Anouther Error :(

[imdead]

Hey Guys Sorry About this,

 

<?php 
if(isset($_POST['submit'])){ 
include'connect.php';
     
    $sql = mysql_query("SELECT * FROM users WHERE username = " . ($_POST['username']) . " AND password = ".addslashes($_POST['password'])); 
    $row = mysql_fetch_array($sql); 

    if($row){
        session_start(); 
        $_SESSION['fname'] = $row['first'];
	$_SESSION['username'] = $row['username']; 
        $_SESSION['lname'] = $row['second']; 
        $_SESSION['logged'] = 1; 
        header("Location: index.php"); 
    }else{
header("Location: login.php");
}
    } 
?> 

 

Whats wrong with that?

The Error i get is

 

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in C:\xampp\htdocs\tlogin.php on line 8

Warning: Cannot modify header information - headers already sent by (output started at C:\xampp\htdocs\tlogin.php: in C:\xampp\htdocs\tlogin.php on line 18

 

The second error will go the moment the first error is gone so theres no need for that to be fixed.

[pocobueno1388]

There is an error with your query, so put a die statement at the end of this line:

 

$row = mysql_fetch_array($sql)or die(mysql_error() . "<p>With Query<br>$sql"); 

[dptr1988]

You are not quoting the values in the WHERE clause

 

They should be quoted like this:

<?php
$query = "SELECT * FROM users WHERE username = '" . ($_POST['username']) . "' AND password = '" . addslashes($_POST['password']) . "'";
$sql = mysql_query($query); 
?>

 

 

 

[imdead]

Thanks Fixed

[pocobueno1388]

Don't forget to press solved.