problem: php variable to search sql table

sqlnoob · March 21, 2008

OK I'm a noob at this, but I recently got a website. The SQL tables are in PHPadmin. I've been trying to use a php variable that I get with a POST from a form on a different htm page called login.htm. The php variable I use in a page called settings.php to check wether the person has entered the correct password.

I know the php part is correct in such a way that it doesn't cause syntax error or what else and I also know that I do connect to the sql table.

Somehow though I am doing something wrong and I'm too much of a noob to figure out what I'm doing wrong, so please help me if you can.

-> The WHERE clause for some reason doesn't do anything with my php variable. <-

I know the connector is right, I know the table is right, I know the password is right, yet I still get the wrong echo i.e. it echoes I put incorrect password, when infact I have used the correct one. I also checked wether I've mistakenly misplaced the if-else, but that's not it either.

sqlnoob · March 21, 2008

Here is what the files and my table look like:

LOGIN.HTM

<HTML>

<HEAD>

<TITLE>SHUGO</TITLE>

</HEAD>

<BODY><H1>LOGIN</H1>

<P>Enter your password <INPUT type="userpass" size=8 maxlength="8" name="password">

Choose your clan <SELECT size=1 name="player">

<OPTION value="Akita">Akita</OPTION>

<OPTION value="Amako">Amako</OPTION>

<OPTION value="Arima">Arima</OPTION>

<OPTION value="Asakura">Asakura</OPTION>

<OPTION value="Chiba">Chiba</OPTION>

<OPTION value="Chosokabe">Chosokabe</OPTION>

<OPTION value="Hatakeyama">Hatakeyama</OPTION>

<OPTION value="Hatano">Hatano</OPTION>

<OPTION value="Hosokawa">Hosokawa</OPTION>

<OPTION value="Imagawa">Imagawa</OPTION>

<OPTION value="Ishida">Ishida</OPTION>

<OPTION value="Isshiki">Isshiki</OPTION>

<OPTION value="Jinbo">Jinbo</OPTION>

<OPTION value="Kikkawa">Kikkawa</OPTION>

<OPTION value="Kikuchi">Kikuchi</OPTION>

<OPTION value="Maeda">Maeda</OPTION>

<OPTION value="Matsudaira">Matsudaira</OPTION>

<OPTION value="Miyoshi">Miyoshi</OPTION>

<OPTION value="Nagao">Nagao</OPTION>

<OPTION value="Otomo">Otomo</OPTION>

<OPTION value="Ouchi">Ouchi</OPTION>

<OPTION value="Shimazu">Shimazu</OPTION>

<OPTION value="Shoni">Shoni</OPTION>

<OPTION value="Takeda">Takeda</OPTION>

<OPTION value="Uesugi">Uesugi</OPTION>

<OPTION value="Urakami">Urakami</OPTION>

<OPTION value="Yamana">Yamana</OPTION>

</SELECT>

</form></div>

</BODY>

</HTML>

sqlnoob · March 21, 2008

SETTINGS.PHP

<?php

$pass = $_POST["userpass"];

$group = $_POST["player"];

if ($con = @mysql_connect('localhost', 'shugonl', 'password')) {

mysql_select_db('shugonl', $con);

$tabpass = mysql_query ("SELECT Password FROM persons WHERE Clan='$group';");

if ($pass == $tabpass) {

$Allowlogin = 1;

setcookie("person", $_POST['clan'], time()+7200);

}

else {

$Allowlogin = 0;

}

?>

<HTML>

<HEAD>

<TITLE>shugo</TITLE>

h1,h2,h3,p {font-family: verdana;}

h1,h2,h3,p {text-align: center}

body {background-color: #2F7B3A;}

a:link {color: #80FFFF}

a:visited {color: #FF80C0}

a:hover {color: #FFFF80}

a:active {color: #80FFFF}

</style>

</HEAD>

<BODY><H1>Welcome</H1>

<P>

<?php

if ($Allowlogin == 1) {

echo "<a href='daimyo.htm'>Continue</A>";

}

else {

echo "incorrect password please try again";

echo "<BR><a href='index.htm'>back</A>";

}

} else {

echo 'connection failed';

}

?>

</BODY>

</HTML>

sqlnoob · March 21, 2008

<?php

if ($con = @mysql_connect('localhost', 'shugonl', 'password')) {

mysql_select_db('shugonl', $con);

echo 'connected to the database';

} else {

echo 'connection failed';

}

mysql_select_db("shugonl", $con);

$sqlpersons = "CREATE TABLE persons

(

Password varchar(,

Clan varchar(10),

Username varchar(20),

Coffer int(,

Taxheight int(1),

Yari int(6),

Dachi int(5),

Yumi int(5),

Daisho int(5),

Honjin int(2),

Taxyear int(2),

Attackp int(1),

Lastyear int(2)

)";

mysql_query($sqlpersons,$con);

$startday = idate("d");