SQL falling down when and statement used.

[beebosoft]

I am trying to check to see if someone has registered and log them in to a site.  I am using the following syntax.

$resultID = mysql_query("SELECT * FROM user where username = '$username' AND password like '$password'", $linkID)or die(mysql_error());

If I omit the AND password like '$password'  it brings me down records but when I add this bit in  it fails everytime.  I have used this before with no problems..  

 

Any help greatly appreciated.

 

Angie

 

[Barand]

What do you mean by "fails". Not returning any records is not a query failure, it merely means that no records match both conditions.

 

Why are you using LIKE and not = in the password check?

[beebosoft]

I tried both like and =  it is saying there is not an entry when there is.

[Barand]

Have you tried

var_dump($password);

to check it contains what you think it contains?

[beebosoft]

I have tried that and is displaying exactly what is in the database

[Ch0cu3r]

And you made sure $username contains what you expect too? 

[Psycho]

Do this:

 

Execute the query without the "AND password=". Then get the record returned and do a var_dump() on the password from the DB results and do a var_dump() on the value of $password in your script. Post the results of both in this thread.

[beebosoft]

 The url is showing me that the username and password are/index.php?message=beebosoft%20nut5tretch  these are exactly the same as in the database, I have checked the name of the database and the name of the table too.

Edited November 25, 2014 by beebosoft

[Psycho]

I have no idea what that URL you posted is supposed to be. It doesn't say anything about what the username and password are. Can you not be bothered with doing a var_dump() on the values used in the query and the values in the database? How do you "see" the values in the database? I assume you are using PHPMyADmin or some other database utility and are looking at the values displayed on the screen. What if a value had an extraneous space, or other non-printable character, at the beginning or end? Do you think you would "see" it? You are asking for help from people that do not have access to your code and database. You need to be sure to give us every opportunity to help you by providing as much relevant information as possible.