Archief - MYSQL: probleem om paswoord uit te lezen

CREATE TABLE tbl_auth_user (
user_id VARCHAR(10) NOT NULL,
user_password CHAR(32) NOT NULL, 
PRIMARY KEY (user_id)
);

INSERT INTO tbl_auth_user (user_id, user_password) VALUES ('admin', PASSWORD('admin'));

<?php
session_start(); 
$errorMessage = '';
if (isset($_POST['txtUserId']) && isset($_POST['txtPassword'])) {
   include 'config.php';
   include 'opendb.php';

   $userId = $_POST['txtUserId'];
   $password = $_POST['txtPassword'];

   $sql = "SELECT user_id 
           FROM tbl_auth_user
           WHERE user_id = '$userId' 
                 AND user_password = PASSWORD('$password')";

   $result = mysql_query($sql) 
             or die('Query failed. ' . mysql_error()); 

   if (mysql_num_rows($result) == 1) {

      $_SESSION['db_is_logged_in'] = true;
      
      header('Location: index_cms.php');
      exit;
   } else {
      $errorMessage = 'verkeerde inloggevevens !';
   }

   include 'closedb.php';
}
?>

<td><input name="txtPassword" type="password" class="box" id="txtPassword"></td>

$sql = "SELECT user_id
           FROM tbl_auth_user
           WHERE user_id LIKE '$userId'
                 AND user_password LIKE PASSWORD('$password')";