<?php
if(isset($_GET['email']) && isset($_GET['password'])){
$email = $_GET['email'];
$password = $_GET['password'];
}else{
echo '<div class="alert alert-danger" role="alert">Wrong Input Credentials.</div>';
}
include './submit-db-connect.php';
$sql="SELECT * FROM users WHERE email = '$email' AND password = '$password'";
$result = mysqli_query($conn,$sql);
$count = mysqli_num_rows($result);
if($count != 0){
echo '<div class="alert alert-success" role="alert">Login Succesful.</div>';
}else{
echo '<div class="alert alert-danger" role="alert">Wrong Input Credentials.</div>';
}
mysqli_close($conn);
?>
Запрос sql не работает с паролем = '$ password', как показано ниже:
$sql="SELECT * FROM users WHERE email = '$email' AND password = '$password'";
Но он работает с паролем = 'admin1234', как показано ниже:
$sql="SELECT * FROM users WHERE email = '$email' AND password = 'admin1234'";
фактическое значение пароля в БД: 'admin1234'