<?php $q = "SELECT * FROM tblName WHERE `username`='" . addslashes(strtolower($_POST["username"])) . "' and `password`='" . addslashes(strtolower($_POST["password'])) . "'"; $rs = mysql_query($q); if (mysql_num_rows($rs) == 1) echo "Found User!"; else echo "Username/Password incorrect."; ?>
|