Comment Comment by sgjohnson I'd say it's wrong to assume it's even a security measure. I'm fairly sure it goes like thisif (db->query("SELECT * FROM `users` WHERE `email` = '[email protected]' AND `password` = MD5('hunter2')") { login(username); } else { error('invalid username or password'); }with nobody giving it a second thought. parent sgjohnson 4 years ago
if (db->query("SELECT * FROM `users` WHERE `email` = '[email protected]' AND `password` = MD5('hunter2')") {
} else { }with nobody giving it a second thought.