Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: _name = "users"; $subusername = $_POST['username']; $subpassword = $_POST['password']; mysqli_connect($db_host, $db_username, $db_passwd, db_name) or die("Can't LogIn to Database"); $sql = "SELECT * FROM $tbl_name WHERE username='$subusername' and user_password='$subpassword'"; $result = mysqli_query($sql); $count = mysqli_num_rows($result); if($count==1) { $_session("username"); $_session("password"); header("location:successfull_login.php"); } else { echo "wrong username / password"; } ?> Source: […]
↧
