Question

Hello every one i’m trying to do a login method for my website, and i’m having a small problem. I’m getting the data from PDO connection but every time im checking the password it returns false. is my variables wrong?
here is my sql query

$this->result = $this->sql->prepare('SELECT username,password FROM User WHERE username=:username AND password=:password');
$this->result->bindParam(':username',   $username,  PDO::PARAM_STR); 
$this->result->bindParam(':password',   $password,  PDO::PARAM_STR); 
$this->result->execute(); 

and here is my if statement:

$this->result=$this->result->fetch(PDO::FETCH_OBJ);
if (($password == $this->result->password) && ($username == $this->result->username)){

i’m not getting error it just return always false. i’m not encrypting the password yet so is not this problem. i think $this->result->password is the problem. can anyone correct me please?

thank you

Answer 1

You can use this as well:

$username=$_GET['username'];$password = $_GET['password'];/*of $_POST, depending of which you used*/
$this->result = $this->sql->prepare('SELECT username,password FROM User WHERE username='$username' AND password='$password');

$this->result->execute();

And then use fetchAll like this:

$this->results = $this->result->fetchAll(PDO::FETCH_ASSOC);
if($this->results['username']==$this->username && $this->results['password']==$this->password){/*u had beed loged in*/}