mysql pin match help

[pcw]

I am just writing a registration and login script. After registration, I would like the user to enter the PIN number emailed to them, to verify that they have supplied the correct email address.

 

The script already creates a random 5 letter password, writes it to the database, and emails it to the user.

 

I am having a bit of trouble working out how to show a login form if the PIN number matches what is in the database, and an error message if it doesnt.

 

Any help on how to solve this would be much appreciated. Below is what I have got so far.

 

_{function pin_chk() {}

 

_{$username = $_POST['username'];}

_{$pin = $_POST['pin'];}

 

 

_{$query = sprintf("SELECT username, gen_id FROM users WHERE username='%s' AND gen_id='%s'",}

    _{mysql_real_escape_string($username),}

    _{mysql_real_escape_string($pin));}

 

_{$result = mysql_query($query);}

 

_{if (!$result) {}

    _{$message  = 'Invalid query: ' . mysql_error() . "\n";}

    _{$message .= 'Whole query: ' . $query;}

    _{die($message);}

 

_{print "Yes it worked"; # This is where the login form goes}

 

_{} else {}

 

_{print "No it didnt"; # This is the error message}

_}

_}

 

Please help, I really cant work this one out 

[br0ken]

Where you have the 'print "Yes it worked"' simply remove this and add the following:

 

header("location: login.php");

 

This will redirect the user to the login page. On this page add your login form html code.

[pcw]

That doesnt seem to work. I have messed about with the code, and the script displays the login form whether the PIN is correct or not. I think it is the actual mysql query code that is wrong. Does anyone know how I can fix this?

[pcw]

can anybody help on this one?