help with error

[ngreenwood6]

I am trying to redirect to another page if the $new_pass is not set. It is not working, but it checks to make sure that $new_pass and $confirm_pass match. Any help is appreciated.

 

<?php
session_start();

$new_pass = Trim(stripslashes(md5($_POST['new_pass'])));
$confirm_pass = Trim(stripslashes(md5($_POST['confirm_pass'])));

//define the database variables
$host = "localhost";
$db_name = "login";
$db_table = "members";
$db_username = "root";
$db_password = "";

//function to insert the data into the database
$update_db = "UPDATE members SET password = '$new_pass' WHERE email = '$reset_email'";

//variable to connect to database
$mysqli_connect = mysqli_connect($host,$db_username,$db_password,$db_name)
or die ("Could not connect to database");

if (!$new_pass)
{
include("valid_password.php");
}
elseif(!$confirm_pass)
{
include("valid_password.php");
}
elseif($new_pass != $confirm_pass)
{
include("dont_match.php");
}
else
{
//variable to send data to the database
mysqli_query($mysqli_connect,$update_db)
or die ("Error: ".mysqli_error($mysqli_connect));

include("reset_finished.php");
}
?>

[DarkWater]

Okay, and what's it doing wrong? >_>

[.josh]

mysqli_query($update_db, $mysqli_connect)

 

you had the arguments reversed

[revraz]

Your logic has many flaws in it.  Look at the order you are doing things and ask yourself it makes sense.

 

Why would you try to update a DB if there may not even be data in the variables?

[ngreenwood6]

It is not checking to see if the $new_pass is set. It just goes past it if I dont put anything in the $new_pass field.

[revraz]

try using isset

[ngreenwood6]

i tried using isset but it did not work either. is there anything that looks like it may be improperly set?

[revraz]

Don't know, we can't see your form.