Username and Password are pasted in from a form.
I know the record exitst and have double checked the username and
password.
If I remove the Password=password('".$Password."') and replace it with
the already encrypted password as Password='123838d839d' it finds the
record. So what am I doing wrong?


$Username=strip_tags(trim($_POST["Username"]));
$Username=mysql_real_escape_string($Username);
$Password=strip_tags(trim($_POST["Password"]));
$Password=mysql_real_escape_string($Password);


$qryResult = mysql_query("SELECT * FROM Listings WHERE
Username='".$Username."' and Password=password('".$Password."')");


Thanks
Mike

On Sun, 01 Jan 2012 21:18:19 -0500, Michael Joel <no (AT) please (DOT) com>
wrote:

Solved....
I had set the password field lungth to short so it was truncating the
value. password() of course then did not match the truncated version.

Mike