sqlsrv_has_rows() ERROR PHP with MSSQL

Question

I'm having a slight problem with my php page which I just don't understand. I'm new in this and i don't really understand my query. When i try to execute my program, error appear like this

Warning: sqlsrv_has_rows() expects parameter 1 to be resource, boolean given

This is my code:

<?php
    session_start();

    try{
    include 'connection.php';

    $username = $_POST['user'];
    $password = $_POST['pass'];

    //check if login form is filled
    if(empty($_POST['user']) || empty($_POST['pass'])){
    echo '<script type="text/javascript">alert("Connection established.");   </script>';
     }
    //search for user and password in the database
    $query = "SELECT * FROM [Emkaandb].[dbo].[tbl_clientslogin] WHERE email='{$username}' AND .password='{$password}' AND active='1'";
    $result = sqlsrv_query($conn, $query);
    if($result == true){
    die(print_r(sqlsrv_errors(),true));
     }
      if(sqlsrv_has_rows($result) !=1){
    echo '<script type="text/javascript">alert("Invalid email or password.");  </script>';
    }else{
     while($row = sqlsrv_fetch_array($result)){
        $_SESSION['name'] = $row['name'];

    }
    header("location: Profile.php");
    }

     }catch  (PDOException $e)
  {
    echo "Error!: " . $e->getMessage() . "
";
    die();
  }

?>

just in case you didn't know. sqlsrv functions has nothing to do with PDO functions. and thus there is very little use in catching PDOExceptions in this code. — Your Common Sense
– Your Common Sense, Commented Apr 21, 2016 at 11:41
In fact, you have to ask explicitly for error messages: sqlsrv_errors(). Once you do you'll see that your SQL is invalid to begin with. — Álvaro González
– Álvaro González, Commented Apr 21, 2016 at 11:50
BTW, it seems your code allows universal login with the magic password ' OR 1=1-- — Álvaro González
– Álvaro González, Commented Apr 21, 2016 at 11:52

Alejandro Balegno · Accepted Answer · 2016-04-21 13:03:55Z

2

$result return resource set id ?

answered Apr 21, 2016 at 13:03

Alejandro Balegno

971 silver badge6 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Alejandro Balegno Over a year ago

i can see if($result == true){ die(print_r(sqlsrv_errors(),true)); } thats die () ? because $result always true...

Collectives™ on Stack Overflow

sqlsrv_has_rows() ERROR PHP with MSSQL

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related