What is the error?

[SUNIL16]

Hi Friends,

 

I am getting below error

 

Warning: mysql_query() expects parameter 1 to be string, resource given in C:\xampp\htdocs\lib_management\login.php on line 22

 

Wen i run this code

<?php

require("config.php");
if(isset($_REQUEST["login_clicked"]))
{
if($_REQUEST["username"]=="")
{
	header("location:login.php?msg=please enter a valid username");
	exit();
}
elseif($_REQUEST["password"]=="")
{
	header("location:login.php?msg=please enter a valid password");
exit();
}
else
{
	$password=$_REQUEST["password"];
	$username=$_REQUEST["username"];
}
$sql=mysql_query("SELECT username,password FROM admintable WHERE username='$_POST[username]' AND password='$_POST[password]'");
$result = mysql_query($sql) or die (mysql_error()); 
$num = mysql_num_rows($result);

    if ( $num != 0 ) { 
header("location:home.html");
exit();
}
else
{
header("location:login.php?msg=invalid login");
}
}
?>

 

My table code is

<?php
require "config.php";

$result = mysql_query("CREATE TABLE `admintable` (

`admintableid` int(20) NOT NULL auto_increment,
`username` varchar(200) collate latin1_general_ci NOT NULL default '',
`password` varchar(200) collate latin1_general_ci NOT NULL default '',
PRIMARY KEY (`admintableid`)
)");
if (!$result) {
    die('Invalid query: ' . mysql_error());
}
?>

 

What is the above warning i am not getting.

[Mchl]

Change

$sql=mysql_query("SELECT username,password FROM admintable WHERE username='$_POST[username]' AND password='$_POST[password]'");

to

$sql="SELECT username,password FROM admintable WHERE username='$_POST[username]' AND password='$_POST[password]'";

[SUNIL16]

Is my sql syntax wrong! It worked for me in live server? Suggestions...

[KevinM1]

Is my sql syntax wrong! It worked for me in live server? Suggestions...

 

Yes, your syntax is wrong.  Mchl gave you the solution.

[Mchl]

Although admittedly SQL is all right (not considering possible SQL injection).

PHP is wrong however and there is no way it was working anywhere.

[SUNIL16]

Ya thanks i agree i was wrong. i send query two times.