PHP login form returning error
问题 I have created a login script below, however I have been told to use prepared statements <?php require '../php/connect.php'; if(isset($_POST['login'])){ $username = mysqli_real_escape_string($con, $_POST['username']); $password = mysqli_real_escape_string($con, $_POST['password']); $select_user = "SELECT * FROM users WHERE username = '$username' AND password = '$password'"; $run_user = mysqli_query($con, $select_user); $check_user = mysqli_num_rows($run_user); if($check_user>0){ header(