[thelist] best way to check for valid user/password in PHP - oops 1 more qu..

thelist-admin at lists.evolt.orgote:
> --- Jason Handby <jasonh at pavilion.co.ukrote:
>> Why not do
>>
>>   SELECT password, username FROM reguser WHERE username =
>> '$username' AND password = '$password'
>>
>>
>

Hi Jason,

While we speak about authentification scripts :

Be sure to check this article on login scripts (it's an asp example but
related to SQL Injection Attacks)
http://www.4guysfromrolla.com/webtech/061902-1.shtml

Matthieu