why do i get this error in mysql MD5

[shrayyef1790]

Database query failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '= 'yam' AND password = 'b17d6ed9577adbe2b48350ef59b7076e' LIMIT 1' at line 1

 

public static function authenticate($username="", $password="") {

    global $database;

    $username = $database->escape_value($username);

    $password = $database->escape_value($password);

 

    $sql  = "SELECT * FROM " . self::$table_name;

    $sql .= "WHERE username = '{$username}' ";

    $sql .= "AND password = '{$password}' ";

    $sql .= "LIMIT 1";

    $result_array = self::find_by_sql($sql);

return !empty($result_array) ? array_shift($result_array) : false;

}

[Jessica]

Echo the entire query so you can see, but it's probably because you don't have a space after the table name, so it looks like the tablename is xxxWHERE and then the username = part causes an error. (To prevent this sort of thing, I always do the space on the new addition, so it'd be " WHERE ..." and " AND ...."

[shrayyef1790]

thank very much it's working now