If a username registers, their username's first letter is automatically capitalized and sent to the database. If a user decides to capitalize a second letter in the middle of their username (Ex: McLoven), unless the username is typed with that capitalized letter, I get an error that says "Incorrect Password!". The password is set as an MD5 encryption.

Any suggestions on what to do to fix this problem?

MySql version: 5.0.91

Here's my Login.php

PHP Code:

<?php
$username = ucfirst($_POST['username']);
$password = $_POST['password'];


include('inc/connect.php');
if ($username&&$password)
{

$query = mysql_query("SELECT * FROM users WHERE username='$username'");

$numrows = mysql_num_rows($query);

if ($numrows!=0)
{

 while ($row = mysql_fetch_assoc($query))
 {
       $dbusername = $row['username'];
       $dbpassword = $row['password'];
       $userid = $row['id'];



// $_SESSION['username'] = $username;
// $_SESSION['userid'] = $userid;
 }

 // check to see if they match
 if ($username==$dbusername&&md5($password)==$dbpassword)
{
  //echo "You're In! <a href='member.php'>Click</a> here to enter the member page.";
  session_start();
  $_SESSION['username']=$username;
  $_SESSION['views'] = 0;
  header('Location:http://www.daobux.com/member.php');
}
else
    echo "Incorrect Password!";

}
else
    die("That user doesn't exist!");


}
else
    die("Please fill out all fields!");


?>

You can use an alternative case-insensitive search with the LIKE keyword:

SELECT * FROM users WHERE username LIKE '$username'

thanks for the informations

You can use an alternative case-insensitive search with the LIKE keyword:

SELECT * FROM users WHERE username LIKE '$username'

That, or force a lower case compare:

SELECT * FROM users WHERE lower(username) = lower('$username')

PHP Code:

<?php

session_start();

include('inc/connect.php');

$username = ucfirst($_POST['username']);
$password = md5($_POST['password']);


if ($username == !"" && $_POST['password'] == !"")
{

$query = mysql_query("SELECT * FROM `users` WHERE `username` = '$username'");

$numrows = mysql_num_rows($query);

if ($numrows != 0)
{

       $row = mysql_fetch_array($query);
 
       $dbusername = $row['username'];
       $dbpassword = $row['password'];
       $userid     = $row['id'];


 // check to see if they match
 if ($username == $dbusername && $password == $dbpassword)
{
  //echo "You're In! <a href='member.php'>Click</a> here to enter the member page.";
  
  $_SESSION['username'] = $dbusername;
  $_SESSION['password'] = $dbpassword;
  $_SESSION['views'] = 0;
  $site = "http://www.daobux.com/member.php";
  header("Location: $site");
} else {
    echo "Incorrect Password!";
}

} else {
    die("Invalid user");
}

} else {
    echo("all fields!");
}

?>