0

Hi everyone I have a PHP script that I wrote which is supposed to validate if a user is already in the database. i can explain better which the code here first

<?php
 #this php file will check the users details entered against the details in the database and echo a response based on if theyre right or not
if($_SERVER['REQUEST_METHOD']=='POST'){
$database = $_POST['database'];
$username = $_POST['username'];
require_once('connection.php'); #require connection.php to connect to database 

$sql = "SELECT username FROM '$database' WHERE username = '$username'";
$result = mysqli_query($connect,$sql);
$check = mysqli_fetch_array($result);
if(isset($check)){
echo 'exists';
}else{
echo 'success';
}
}
?>

The issue is with the SQL statement specifically the from $database part. The value of $database should be TPS_STATS which should work but isn't, if I change the statement too from TPS_STATS it works fine. I have echoed the value of $database out to test it and it returns TPS_STATS So I am at a loss to why it will not execute properly. To clarify further, if a username is in the database it should print exists where if not it will print success, it always prints success when i try to use the $database variables value

Anurag Srivastava
  • 14,077
  • 4
  • 33
  • 43
Charlie Ansell
  • 451
  • 1
  • 7
  • 22

0 Answers0