Member Avatar for Jay_7

**Parse error: syntax error, unexpected T_VARIABLE in this line "$validate_user_information = sqlsrv_query "select * from userinfo where badgenumber = '"$user_ssn"'";"

//Login Page Starts here
    elseif($_POST["page"] == "users_login") 
    {
        $user_ssn = trim(strip_tags($_POST['badgenumber']));

        $validate_user_information = sqlsrv_query "select * from `userinfo` where `badgenumber` = '"$user_ssn"'";

        if(sqlsrv_num_rows($validate_user_information) == 1)
        {
            $get_user_information = sqlsrv_fetch_array($validate_user_information);
            $_SESSION["VALID_USER_ID"] = $user_ssn;
            echo 'login_process_completed_successfully=yes';
        }
        else
        {
            echo '<br><div class="info">Sorry, you have provided incorrect information. Please enter correct user information to proceed or contact your College Web Administrator. Thank You</div><br>';
        }
    }
    //Login Page Ends here
  • 3 Contributors
  • 3 Replies
  • 265 Views
  • 5 Hours Discussion Span
  • Latest Post Latest Post by andrevanzuydam
Member Avatar for hericles

That syntax doesn't look right. At the very least there should be () around the string and, if memory serves, sqlsrv_query takes more parameters than that... but I could be wrong (too lazy to look up the docs)

Member Avatar for Jay_7

can you give a a sample code for log in using php and mssql database??

Member Avatar for andrevanzuydam

Hi Jay

I've implemented both native and open source drivers in mssql in Cross Database Engine, you should give it a spin, save you hours of time figuring out what to do. All the connection strings are the same.

http://sourceforge.net/projects/cdeengine/

I would have a look at your SQL, no need to use the escape tags for your table names, you are missing concatenation also.

$sql = "select * from userinfo where badgenumber = '{$user_ssn}'";
$stmt = sqlsrv_query( $conn, $sql);
$arr = sqlsrv_fetch_array ( $stmt);

//inside the $arr are your values you need

Cross database engine is simpler to use and you don't need to remember whether the connection param comes first or last.

$sql = "select * from userinfo where badgenumber = '{$user_ssn}'";
$obj = $CDE->get_value (0,  $sql); //object
$arr = $CDE->get_value (0,  $sql, 1); //array

Hope that helps your problem

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.