Question

my problem is solved. I don’t expect for more answers. So, please don’t vote down, cause I need some reputations to vote up for others post. Thanks

I try to use md5() for the login system but it doesn’t encrypt password. It still display the original password on my database. Here is my code:

mysql_connect("$host", "$username", "$password")or die("cannot connect"); 
mysql_select_db("$db_name")or die("cannot select DB");

$myusername=$_POST['myusername']; 
$mypassword=md5($_POST['mypassword']); 



$sql="select * from $tbl_name where username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);

$count=mysql_num_rows($result);

if($count==1){
session_register("myusername");
session_register("mypassword"); 
header("location:login_success.php");
}
else {
header("location:login.html");
}
?>

I just edit my code to $mypassword=md5($_POST['mypassword']);

Answer 1

You just printed the md5d password, store it into the variable before insertion

$mypassword = md5($_POST['mypassword']);
$sql="select * from $tbl_name where username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);

I think your logic have some problem, are you storing passwords in encrypted form? then only you can fetch the data by this select command, otherwise the $count=mysql_num_rows($result); is zero always

and please take a look here also

Why shouldn’t I use mysql_* function in PHP?