Username and Password Query:

[chromonium]

Dear Experts,

I have a database in MySQL named main, and a table within that named 'data'. There are two field in this table named "username" and "pass".

How can I cross check to see if the supplied variable correspond with the ones in the database.

Thanks a lot

Many Regards

adam

 

[sleipnir214]

If your passwords are in cleartext (not recommended):

SELECT count(username) from data where username = '<supplied username>' and pass = '<supplied password>'

If the count is greater than 0, the provided credentials match a record in the database.

If the passwords are stored as a hash, it'll be something like:

SELECT count(username) from data where username = '<supplied username>' and pass = [MySQL function used to hash the password in the first place]('<supplied pasword>')

Available MySQL hashing functions are password(), encrypt(), and md5(). And you will have to match the algorithm used to hash the recorded passwords already in the database. See the MySQL online documentation (

http://www.mysql.com)

for more details. Want the best answers? Ask the best questions:

http://www.tuxedo.org/~esr/faqs/smart-questions.html

TANSTAAFL!