johny_d

The quotes are ok. I think your problem comes from that [code]htmlspecialchars[/code] piece of code, because if you give an echo to [code][B][COLOR=#800080]htmlspecialchars[/COLOR][COLOR=#808080]([/COLOR][/B]$_POST[B][COLOR=#808080][[/COLOR][/B][COLOR=#0000ff]'username'[/COLOR][B][COLOR=#808080]][/COLOR][/B], ENT_QUOTES[B][COLOR=#808080])[/COLOR][/B];[/code] before entering it in the mysql query you will probably see your username string contains at least one # charcater (the password is hashed anyway so …

Here's the php code [php] <?php header('refresh:5; url=new_page.php'); ?> [/php] Be very careful NOT to output anything (not even a blank space before the php tag) to the browser before you call the refresh beacause it will give you an error.