SQL injection proof login script

SUBMITTED BY: Guest

DATE: Jan. 14, 2014, 8:20 p.m.

FORMAT: Text only

SIZE: 321 Bytes

Raw Download

HITS: 1248

Report

$mysqli = new mySqli('hostname', 'db_username', 'db_password', 'db_name');
$query = sprintf("SELECT * FROM `Users` WHERE UserName='%s' AND Password='%s'",
                  $mysqli->real_escape_string($Username),
                  $mysqli->real_escape_string($Password));
$mysqli->query($query);