what's wrong with this code? i am getting a blank page when i pass my form data to it

[anon]

<?php

if(! isset($_POST['username'])) {
header("Location: login.php");
}

mysql_connect(DELETED)
mysql_select_db(DELETED)

$username = $_POST['username'];
$username = mysql_real_escape_string($username);
$result = mysql_query("SELECT userid, pswd FROM users WHERE username = '$username'");

if(mysql_num_rows($result) > 0) {
$row = mysql_fetch_assoc($result);
$userid = $row['userid'];
$pswd = $row['pswd'];
}

$formpswd = $_POST['password'];
$formpswd = md5($formpswd);

if(mysql_num_rows($result) == 0) {
header("Location: login.php");
} else if($pswd == $formpswd) {
session_unset();
session_destroy();
session_start();
$_SESSION['userid'] = $userid;
header("Location: userhome.php");
}

mysql_close();

?>
--
----------------------------------------------
Posted with NewsLeecher v3.0 Final
* Binary Usenet Leeching Made Easy
* http://www.newsleecher.com/?usenet
----------------------------------------------

[Mark Rees]

> <?php

if(! isset($_POST['username'])) {
header("Location: login.php");
}

mysql_connect(DELETED)
mysql_select_db(DELETED)
Put semicolons on the end of the two lines above for starters
$username = $_POST['username'];
$username = mysql_real_escape_string($username);
$result = mysql_query("SELECT userid, pswd FROM users WHERE username = '$username'");
if(mysql_num_rows($result) > 0) {
$row = mysql_fetch_assoc($result);
$userid = $row['userid'];
$pswd = $row['pswd'];
}

$formpswd = $_POST['password'];
$formpswd = md5($formpswd);

if(mysql_num_rows($result) == 0) {
header("Location: login.php");
} else if($pswd == $formpswd) {
session_unset();
session_destroy();
session_start();
$_SESSION['userid'] = $userid;
header("Location: userhome.php");
}

mysql_close();

?>

[Justin Koivisto]

an**@the.net wrote:

mysql_connect(DELETED)
mysql_select_db(DELETED)

lines don't end with ;

--
Justin Koivisto, ZCE - ju****@koivi.com
http://koivi.com

[Jan Declercq]

nomopofom (an**@the.net) wrote:

<?php

if(! isset($_POST['username'])) {
header("Location: login.php");
}

mysql_connect(DELETED)
mysql_select_db(DELETED)

$username = $_POST['username'];
$username = mysql_real_escape_string($username);
$result = mysql_query("SELECT userid, pswd FROM users WHERE username =
'$username'");

if(mysql_num_rows($result) > 0) {
$row = mysql_fetch_assoc($result);
$userid = $row['userid'];
$pswd = $row['pswd'];
}

$formpswd = $_POST['password'];
$formpswd = md5($formpswd);

if(mysql_num_rows($result) == 0) {
header("Location: login.php");
} else if($pswd == $formpswd) {
session_unset();
session_destroy();
session_start();
$_SESSION['userid'] = $userid;
header("Location: userhome.php");
}

mysql_close();

?>

If you want the php error reporting, who will tell you what's wrong, instead
of a white page put: error_reporting(E_ALL); at the beginning of your
php code
(if everything works it's better to put it back to: error_reporting(0);
(http://www.php.net/error_reporting)