[snip]
$sql1 = "SELECT * from `admin` where `admin`.user = 
'"$_POST['validuser']"' AND `admin`.pwd = '"$_POST['password']"'";

$sql1 = "SELECT * from `admin` where user = "$_POST['validuser']" AND 
pwd = "$_POST['pass']"";
[/snip]

subtle differences....

$sql1 = "SELECT * from `admin` where `admin`.user = 
'".$_POST['validuser']."' AND `admin`.pwd = '".$_POST['password']."' ";

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to