Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*[“‘][a-z0-9\-_\!\$]+[“‘]': rname']; #Username $Password = $_POST['pass']; #Password // To protect MySQL injection $Username = mysqli_real_escape_string($Username); $Password = mysqli_real_escape_string($Password); $sql = ("SELECT * FROM users WHERE username='$Username' and password='$Password'"); $result = $mysqli->query($sql); // Mysql_num_row is counting table row $count=mysqli_num_rows($result); // If result matched $Username and $Password, table row must be 1 row […]
↧
