My PHP Login :(

[mtayloronline]

Hi Guys, Im new here, Can someone please help me and tell me why my PHP code isn't working :/

 

<?php
session_start();
$sql = mysql_connect('localhost', 'putwriter_login', 'MyPassHere');

if(!$sql){
die(mysql_error());
}
mysql_select_db('putwriter_college');


$user = mysql_real_escape_string($_POST['user']);
$pass = mysql_real_escape_string($_POST['password']);


$sqlSel = mysql_query("SELECT * FROM `putwriter_college`.`Login` WHERE `EmailAddress`=$user AND `Password`=$pass LIMIT 1;");
while($row = mysql_fetch_assoc($sqlSel)){

echo 'Im probably not here';

if(($row['EmailAddress'] == $user) && ($row['Password'] == $pass)){
	$_SESSION['loggedIn'] = md5('someSessId');
	echo "<meta http-equiv='refresh' content='2;url=./home.php'>";
}else{
	die('FAIL');
}
}

?>

 

This is what I get :

Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in /home/putwriter/domains/putwriter.co.uk/public_html/login.php on line 16

[bh]

Your select query isnt valid.

$sqlSel = mysql_query("SELECT * FROM `putwriter...

Whats your putwriter_college.Login table structure?

[DarkMantis]

My table structure is as follows:

 

ID (int 7)

EmailAddress (varchar 255)

Password (varchar 255)

 

 

Thanks

[bh]

Your query structure is ok, it might be one of the variables in the query...

 

$user = mysql_real_escape_string($_POST['user']);
$pass = mysql_real_escape_string($_POST['password']);

var_dump($user);
var_dump($pass);

 

Debug a bit, lets see the variables content... Both are string?

[DarkMantis]

Hey,

 

Both are string

 

I've got that error sorted now it just continously loads without forwarding me to the second page.

 

 

[Pikachu2000]

If they're both string values, they need to be quoted in the query string.

 

. . . `EmailAddress`= '$user' AND `Password`= '$pass' . . .