Hi,
When your SQL queries the username and/or password values, I'm pretty sure your script does something along the lines of:
Code:
// assuming $_POST[username] is the field for hte username of the login form
$query = mysql_query("SELECT username FROM table WHERE username LIKE \"$_POST[username]\"");
It should use the equal = sign instead of LIKE keyword.
Code:
$query = mysql_query("SELECT username FROM table WHERE username=\"$_POST[username]\"");
I'm thinking this is the case one way or another. Obviously it won't be exactly the same, but this gives me a hunch. Hope this helps.
|