mysql password field not decrypting - HTML Forums

mattmill30 · 11-03-2009, 08:43 PM

Hi,

I'm having a simular problem to:

http://www.htmlforums.com/databasing...on-117058.html

However, i'm using the password('') encryption function.

Essentially, when i SELECT * FROM users WHERE password=password('$password'), no rows are returned.

Interesting if i remove password('') and just leave password=$password, and then enter the encrypted form of the password as $password, it returns a row.

The source code i'm using is:

PHP Code:


			
    $email=$_POST['email'];
    $password=$_POST['password'];
    $host="host"; // Host name 
    $db_username="dbusername";
    $db_password="dbpassword";
    $db_name="dbname";
    $tbl_name="users";
    $sql="SELECT * FROM $tbl_name WHERE user_email='$email' AND user_password=password('$password')";
    $con = mysql_connect($host, $db_username, $db_password)or die("cannot connect");
    mysql_select_db($db_name, $con)or die("cannot select DB"); 
    $result=mysql_query($sql);
    if ($email != "") {
        $count=mysql_num_rows($result);
        echo "Number of Rows:&nbsp;";
        print_r ($count);
        echo "<br />";
    }
?>

An example is available here:

http://tendervendors.com/dev/testing...trownumber.php - only checks username
http://tendervendors.com/dev/testing...trownumber.php - userpass checks username and password('$password')

Using Credentials:
Username: test@hostroute.com
Password: 12345

I've reported this to the host company, because i'm sure its not the code, but its not the first/last time i'll be wrong.

Has anyone got any ideas where the fault could be?

Thanks for any help,

Matthew Millar