get paid to paste

Code

[tpcode]$pw = $_POST[password];

$sql = "SELECT * FROM users WHERE '" .$_POST[username]. "' = '" .$_POST[username]. "' AND '" .md5($pw). "' = '" .md5($pw). "';";
$query = mysql_query($sql);

if (mysql_fetch_row($query) = 1)
{
	echo "Sie haben sich erfolgreich eingeloggt.";
}[/tpcode]

Pasted: Mar 28, 2011, 9:55:37 pm
Views: 13