Hier bidde
$Value = mysql_query("SELECT id FROM users WHERE username = '$username' AND password = '$password'");
if(mysql_num_rows($Value) == 1){}
Das sagt nur aus das der Query fehlschlägt... mach mal
mysql_query(DeinQuery) or die("MySQL Error:". mysql_error());Aber bitte. Bitte nicht mit der mysql_* Extension sondern wenn MySQLi
Mach mal aus
if(mysql_num_rows(mysql_query("SELECT id FROM users WHERE username = '$username' AND password = '$password'")) == 1)
ein
if(mysql_num_rows(mysql_query("SELECT id FROM users WHERE username = '".$username."' AND password = '".$password."'")) == 1)Nutz lieber MySQLi oder PDO.
Hier mal ein Beispiel für PDO
try {
$connection = new PDO("mysql:host=localhost;dbname=datenbank", "root", "pw");
$connection->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$connection->setAttribute(PDO::ATTR_EMULATE_PREPARES, false);
$connection->exec("SET CHARACTER SET utf8");
} catch (PDOException $ex) {
die($ex->getMessage());
}$sth = $connection->query("SELECT * FROM `tabelle`");$bla = "irgendwas";
$sth = $connection->prepare("SELECT * FROM `tabelle` WHERE `field` = :bla LIMIT 1");
$sth->execute(array(":bla" => $bla));$obj = $sth->fetch(PDO::FETCH_OBJ);
echo $obj->feld;Edit
try {
$connection = new PDO("mysql:host=localhost;dbname=datenbank", "root", "pw");
$connection->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$connection->setAttribute(PDO::ATTR_EMULATE_PREPARES, false);
$connection->exec("SET CHARACTER SET utf8");
} catch (PDOException $ex) {
die($ex->getMessage());
}
$username = "penis";
$password = "dasistgeheim";
$sth = $connection->prepare("SELECT NULL FROM `users` WHERE `username` = :username AND `password` = :password LIMIT 1");
$sth->execute(array(":username" => $username, ":password" => $password));
if($sth->rowCount()) {
// todo
} else {
// kein Ergebnis
}