Handling Single-Column Single-Record Mysql Result

Codewalkers Forums Sponsor:

AT&T devCentral & BlackBerry(r) Webcast Series: BlackBerry and GPS -Build Location Awareness into your BlackBerry Applications, July 10th-1:00PM EST. Register Today!

January 23rd, 2004, 02:56 AM

bluephoenix

Levelheaded Curmudgeon

Join Date: Apr 2007

Location: Syracuse, NY

Posts: 507

Time spent in forums: 7 h 13 m 2 sec
Reputation Power: 2

Handling Single-Column Single-Record Mysql Result

I'm helping a friend stumble through writing some very basic authentication scripts using php and mysql.

Our relevent PHP code follows:

php Code:

Original - php Code

<?php
  $name = $_POST['name'];
  $password = $_POST['pass'];
 
  $server = mysql_connect("localhost", "PHPUSER", "PHP123");
  mysql_select_db("DND");
  $result = mysql_query("SELECT USER_PASSWD FROM DNDAUTH WHERE USER_ID='$name'")
            or die("Invalid Query!" . msql_error());
 
  list($incomming_password) = mysql_fetch_row($result);
  mysql_close($server);
 
  if ($password == $incomming_password)
    echo "$name authenticated.";
  else
    header("Location: login.html");
?>

I really couldn't see the use of forming the query SELECT * FROM DNDAUTH because we're only interested in the one value, USER_PASSWD. But it seems a bit of a waste to extract the value out through an array and then through list().

Is there a better way to do this, or is this pretty much standard and it just seems weird to me because we're returning a single column single record?

Thanks.

Tim

January 23rd, 2004, 03:09 AM

CodeKadiya

Join Date: Apr 2007

Location: Colombo,Sri Lanka

Posts: 2,313

Time spent in forums: < 1 sec
Reputation Power: 4

RE: Handling Single-Column Single-Record Mysql Result

I'd code authentication scripts in this way. Just check it out, you'll see what I do.

php Code:

Original - php Code

 
<?php
  $name = $_POST['name'];
  $password = $_POST['pass'];
 
  $server = mysql_connect("localhost", "PHPUSER", "PHP123") or die("Couldn't connect");
  mysql_select_db("DND",$server) or die("Couldn't select DB");
  $result = mysql_query("SELECT USER_ID,PASSWD FROM DNDAUTH WHERE USER_ID='$name' AND PASSWD='$password'")
            or die("Invalid Query!" . mysql_error());
 
  mysql_close($server);
 
  if (mysql_num_rows($result)>0)
    echo "$name authenticated.";
  else
    header("Location: login.html");
?>

January 23rd, 2004, 03:12 AM

bluephoenix

Levelheaded Curmudgeon

Join Date: Apr 2007

Location: Syracuse, NY

Posts: 507

Time spent in forums: 7 h 13 m 2 sec
Reputation Power: 2

RE: Handling Single-Column Single-Record Mysql Result

pretty sly

Thanks!

Thread Tools	Search this Thread
Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread: