Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: $myusername = stripslashes($myusername); $mypassword = stripslashes($mypassword); $myusername = mysql_real_escape_string($myusername); $mypassword = mysql_real_escape_string($mypassword); $sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'"; $result=mysql_query($sql); $count=mysql_num_rows($result); if($count==1){ $_SESSION["myusername"]; $_SESSION["mypassword"]; header("Location:".ADMIN_URL."/login_success.php"); } else{ echo "Error en Username o Password."; } ob_flush(); Source: http://pastebin.com/raw.php?i=jYbkwR2J
↧
