Hello,

has anyone run accross problems with the password() function in mysql? I have a user table in a separate database from the mysql one, but any time I try to compare passwords it screws up.

I can run console and web queries like:

select pword from login where u_id=<value>;

and it returns one hashed password. good.
but

select * from login where u_id=<"value"> AND password('<password>');

OR

select * from login where u_id=<"value"> AND pword=password('<password>');

returns an empty sets. Shouldn't I get atleast one row back? (using correct u_id and pword)

also selecting a user name by the password returns all user names, is that just mysql security?

lol, you dont need the < and >'s they just indicate a variable in an example, so :

select * from login where u_id="value" AND pword=PASSWORD('password');

should do it

Thanks.

I was putting them in there instead of actual values.

But really can anyone help?