mysql_real_escape_string

[Tom]

Hello,

$login = new query;
$login->connect('user');

$query = "SELECT IF ( pass = '".mysql_real_escape_string($_POST['pass'] ;

^^

$login->query($query, $login->connection)."', TRUE, FALSE) FROM password WHERE nick = 'admin'");

Harzliche Grüße vom Berg
http://www.annerschbarrich.de

Tom