php login using form error

Asked Mar 06 '16 at 07:56

Active Mar 06 '16 at 07:56

Viewed 14 times

have made a simple dynamic login page.you have to enter username and password in order to view data.I have pasted the code below and the screenshot of error.code in config.php is the connection made with database.name of db is department and tablename is user.

   if($_POST)
   { 
    $unam=$_POST["uname"];
    $pwd=$_POST["pwd"];
    include ("config.php");

    $res=mysqli_query($con,"select * from user where uname=$unam AND password=$pwd ");
    $row=mysqli_fetch_array($res);

    //also tried
    //while($row=mysqli_fetch_array($res);
    if($res){ ?> <a href="list.php">Click here to view</a><?php } 
    else { ?> login failed <?php }
    }

asked Mar 06 '16 at 07:56

Machine

You should escape user input in you queries – Ties Mar 06 '16 at 07:58
Your mysqli syntax is wrong. You should be using prepared statements for your query, as shown in the linked article. – Your Common Sense Mar 06 '16 at 08:00
please could you write the proper syntax. that would be really helpful.new with this – Machine Mar 06 '16 at 08:02

php login using form error

0 Answers0