Hi
I am new in php. Below code works fine. But If I change Select Command Like this:
$sql = "SELECT login_id,password FROM user_right WHERE login_id = '$username' and password = '$password'";
It shows error recorde not found. Also I need to show the role of select user. Pls Help me
<?php
include_once'../inc/header.php';
if (isset($_POST['submit']) && $_POST['submit'] != "" )
{
if(empty($_POST['username']))
{
$handleError = "User is empty!";
$_SESSION["errormsg"] = $handleError;
header("Location:../notification/errormsg.php");
//echo $handleError;
return false;
}
if(empty($_POST['password']))
{
$handleError = "Password is empty!";
$_SESSION["errormsg"] = $handleError;
header("Location:../notification/errormsg.php");
//echo $handleError;
return false;
}
$username = trim($_POST['username']);
$password = trim($_POST['password']);
try
{
$sql = "SELECT * FROM user_right WHERE login_id = '$username' and password = '$password'";
$stmt = $dbh->prepare($sql);
$stmt->setFetchMode(PDO::FETCH_ASSOC);
if ($stmt = $dbh->query($sql)) {
if ($stmt->fetchColumn() > 0)
{
$_SESSION["username"] = $username;
$_SESSION["password"] = $password;
header("Location:../admin/");
exit();
}
else
{
$handleError="user name or password is wrong";
$_SESSION["errormsg"] = $handleError;
header("Location:../notification/errormsg.php");
exit();
};
}
}
catch (PDOException $e)
{
echo $e->getMessage() . "\n";
file_put_contents('PDOErrors.txt', $e->getMessage(), FILE_APPEND);
}
}
include '../inc/footer.php';
pls help me