structure a select statement with multiple where

[thewebdude]

Hi,
I am doing a project with dreamweaver and i ran into a hitch with my select statement.
I have this

SELECT *
    FROM client, `statement`
    WHERE client.client_id = `statement`.client_id 

when i execute this it selects everybody in the database. So i want to add another WHERE statement to this query, this time one that compares the client.username with the session variable "MM_Username".
Thank you in anticipation of solving this for me!
So I am looking at something like this

SELECT *
    FROM client, `statement`
    WHERE client.client_id = `statement`.client_id  AND WHERE client.username = '$_SESSION['MM_Username']'

The session php code is as follows

<?php
    if (!isset($_SESSION)) {
      session_start();
    }
    $MM_authorizedUsers = "";
    $MM_donotCheckaccess = "true";
 
    // *** Restrict Access To Page: Grant or deny access to this page
    function isAuthorized($strUsers, $strGroups, $UserName, $UserGroup) { 
      // For security, start by assuming the visitor is NOT authorized. 
      $isValid = False; 
 
      // When a visitor has logged into this site, the Session variable MM_Username set equal to their username. 
      // Therefore, we know that a user is NOT logged in if that Session variable is blank. 
      if (!empty($UserName)) { 
        // Besides being logged in, you may restrict access to only certain users based on an ID established when they login. 
        // Parse the strings into arrays. 
        $arrUsers = Explode(",", $strUsers); 
        $arrGroups = Explode(",", $strGroups); 
        if (in_array($UserName, $arrUsers)) { 
          $isValid = true; 
        } 
        // Or, you may restrict access to only certain users based on their username. 
        if (in_array($UserGroup, $arrGroups)) { 
          $isValid = true; 
        } 
        if (($strUsers == "") && true) { 
          $isValid = true; 
        } 
      } 
      return $isValid; 
    }
 
    $MM_restrictGoTo = "myflog.php";
    if (!((isset($_SESSION['MM_Username'])) && (isAuthorized("",$MM_authorizedUsers, $_SESSION['MM_Username'], $_SESSION['MM_UserGroup'])))) {   
      $MM_qsChar = "?";
      $MM_referrer = $_SERVER['PHP_SELF'];
      if (strpos($MM_restrictGoTo, "?")) $MM_qsChar = "&";
      if (isset($_SERVER['QUERY_STRING']) && strlen($_SERVER['QUERY_STRING']) > 0) 
      $MM_referrer .= "?" . $_SERVER['QUERY_STRING'];
      $MM_restrictGoTo = $MM_restrictGoTo. $MM_qsChar . "accesscheck=" . urlencode($MM_referrer);
      header("Location: ". $MM_restrictGoTo); 
      exit;
    }
    ?>
 

[Rabbit]

I don't see your query anywhere in your PHP code.

As far as your query goes, the syntax is wrong, you only need to use the WHERE clause once. And the SQL engine won't have access to your PHP variables so you will have to append the value to the SQL string in your code.

[Anas Mosaad]

That reminds me of one mysteries select statement. It's the only case I could see where twice in a select statement:

SELECT SELECT FROM WHERE WHERE

It's explained very well by Serge here https://www.ibm.com/developerworks/m...here49?lang=en