Question

Possible Duplicate:
Warning when using mysql_fetch_assoc in PHP

i am having a problem with the following codes, i am new in encountering this error
here is the code

session_start();
$uname=$_SESSION['login'];

$host="localhost";
$username="root";
$password="";
$db_name="sampledb";
$tbl_name="tblsched";
mysql_connect("$host", "$username", "$password")or die("cannot connect"); 
mysql_select_db("$db_name")or die("cannot select DB");

$sql = "SELECT * FROM tblteacher WHERE teacherName=$uname";
$result=mysql_query($sql);
$row = mysql_fetch_assoc($result);

$teacherid  = $row['teacherID'];

it gives me a “mysql_fetch_assoc() expects parameter 1 to be resource, boolean” error, how do i deal with this error?? i have used this code already a few times in other files and it worked perfectly except now, i checked the names of the rows and it was correct

i already tried using other commands such as mysql_fetch_array, mysql_result, mysql_fetch_row and it gives the same error

Answer 1

You seem to be using a variable that is a string, you need to encapsulate it in quotes:

SELECT * FROM tblteacher WHERE teacherName='$uname'

On that note, I see that it is coming from a Session variable, I take it that it is already cleansed to make sure there are no possible injection attacks within it – yes?