Re: Where clause not working with aes_decrypt function

[Randy Clamons]

Brannon,

From what I see, the password is stored encrypted, otherwise your select columns wouldn't decrypt the password. Your WHERE clause is also decrypting the user-entered password. It doesn't make sense in the context. Probably what you meant was:

$loginUser = "SELECT username, aes_decrypt(password, 'key')
FROM login
WHERE username = '$username' and password = aes_encrypt('$password', 'key')";
$userIn = mysql_query($loginUser) or die("The login error is: " . mysql_error());