[PHP] Login function

[Bufo]

Hello I have problem with one function, when I wanna use this function, appears white site:

function logIn()
	{
		if (!empty($login_account) && !empty($login_password)) {
			$query_login = $db->query("SELECT `accno`,`password` FROM `accounts` WHERE `accno` = '".$login_account."' AND `password` = '".$login_password."' LIMIT 1;");
			
			foreach($query_login as $login) {
				if($login == "Array") {
					echo "Login";
				} else {
					echo "Not login";
				}
			}else {
				echo "Not login";
			}
			break;
		}
	}

It's not problem with var becouse when I put in this someone account and password it's the same error.

$login_account = '111111';
$login_password = 'tibia';

Anybody can help me ?

#Edit
This is also not a problem with query becouse when I put this query in myphpadmin:

SELECT `accno`,`password` FROM `accounts` WHERE `accno` = '".$login_account."' AND `password` = '".$login_password."' LIMIT 1

With any account and password, it's works

 

[Bufo]

I also tried use something like this:

    function logIn($login_account,$login_password)
       {
         $query_login = $db->query("SELECT `accno`,`password` FROM `accounts` WHERE `accno` = '".$login_account."' AND `password` = '".$login_password."' LIMIT 1;");

             foreach($query_login as $login) {
                if($login == "Array") {
                   echo "Login";
                } else {
                   echo "Not login";
                }
             }
          }

And same error, white page.

 

[Angry encoder]

Don't understand your description of the problem. Do you mean the login don't work with account 111111 and password tibia?

 

[otsvd]

To stop getting a white screen and see the actual errors add this right before

function logIn()

ini_set('display_errors', TRUE);
error_reporting(E_ALL);

If I had to guess your problem is that `$db` doesn't exist, so you'd get an error like "Fatal error: Call to a member function query() on a non-object"

You need to pass $db as a parameter, or create it like

$db = new PDO('mysql:host=localhost;dbname=otserv', 'user', 'pass');

You also should not mix $login_account and $login_password with the query, instead use prepared statements.