Question

been recoding my site using code igniter. I am having some quirks with my seemingly sensical scripts.

please note that I am aware of not encrypting passwords but am just clear texting until I can get signed in and will implement as step 2

Error Number: 1064

You have an error in your SQL syntax; check the manual that
corresponds to your MySQL server version for the right syntax to use
near ‘@gmail.com && password = Password LIMIT 1’ at line 1

SELECT id FROM users WHERE email = [e-mail] && password =
Password LIMIT 1

HERE is my code along with an explanation of my problems.

Thanks in advance.

Answer 1

You need to have quotes around Password and Email on your select statement.

The following should work for your case:

$email = mysql_real_escape_string($this->input->post('email'));
$password = mysql_real_escape_string($this->input->post('password'));
$query = $this->db->query('SELECT id FROM users WHERE email = "' . $email . '" && password = "' . $password . '" LIMIT 1');