Need help on an error message

[valwardon]

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/fehsetfc/public_html/user/admin/index.php on line 19

 

than when i open that file this is what it says

 

<?PHP

session_start();

include "../../affconfig.php";

include "../lang/$language";

 

if ($_POST['userid']!='' && $_POST['password']!='')

{

  // protection against script injection

  $userid = preg_replace('/[^a-zA-Z0-9_]/', '', $_POST['userid']);

  $password = preg_replace('/[^a-zA-Z0-9_]/', '', $_POST['password']);

   

  // if the user has just tried to log in

  $db_conn = mysql_connect($server, $db_user, $db_pass)

    or die ("Database CONNECT Error (line 11)");

  mysql_select_db($database, $db_conn);

 

  $query = "select * from admin where user='$userid' and pass='$password'";

  $result = mysql_query($query, $db_conn);

  if (mysql_num_rows($result) >0 )

  {

    // if they are in the database register the user id

    $_SESSION['aff_valid_admin'] = $userid;

    // logout user if he was logged in before

    $_SESSION['aff_valid_user'] = '';

    unset($_SESSION['aff_valid_user']);   

    echo "<META HTTP-EQUIV=\"Refresh\" CONTENT=0;URL=index2.php>";

    exit;

  }

}

 

  include "header.php";

 

  if(aff_admin_check_security())

  {

    aff_redirect('index2.php');

    exit;

  }

  else

  {

    if (isset($_POST['userid']))

    {

      // if they've tried and failed to log in

      echo AFF_I_CANNOTLOG;

    }

    else

    {

      // they have not tried to log in yet or have logged out

      echo AFF_I_NOTLOGGED;

    }

 

    // provide form to log in

?>   

    <form method=post action="index.php">

    <table align=center border=0>

    <tr><td><?=AFF_G_USERNAME?>:</td>

    <td><input type=text name=userid></td></tr>

    <tr><td><?=AFF_G_PASSWORD?>:</td>

    <td><input type=password name=password></td></tr>

    <tr><td colspan=2 align=center>

    <input type=submit value="Log in"></td></tr>

    </table></form>

<?   

  }

?>

</p>

<br>

<?PHP       

include "footer.php";

?>

 

Does anyone know what is wrong?

[AndyB]

Answered your original -> http://www.phpfreaks.com/forums/index.php/topic,185277.msg829493.html#msg829493

[ignace]

add

 

<?php

if ($result !== null) {

?>

 

before if (mysql_num_rows($result)..