Query MySQL database

Question

Experts,
I stupefy as to why this login script doesn't work once I
switch over to MySQL. This login Script works fine in Access and I
have been using it with several other website. Some how the
comparision always show value of "1" even though there is a match
in the database. Am I using a MySQL reserve veriable? My only
assumption is that I changed my DB from MS Access to MySQL. Please
advise, your help is greatly appreciated!
Here is my login form:
<CFFORM ACTION="login_process.cfm" METHOD="POST">
user name: <CFINPUT TYPE="text" NAME="user_name"
REQUIRED="YES" MESSAGE="user name is required." SIZE="20"
CLASS="form"><br />
password: <CFINPUT TYPE="PASSWORD" NAME="password"
REQUIRED="YES" MESSAGE="password is required." SIZE="20"
CLASS="form">
<INPUT TYPE="submit" VALUE="sign in" NAME="submit2"
CLASS="formbutton" />
</CFFORM>
Here is my login script:
<CFQUERY NAME="qVerify" DATASOURCE="myDB">
SELECT *
FROM members
WHERE user_name = '#form.user_name#'
AND password = '#form.password#'
</CFQUERY>
<CFSET comparison = Compare(form.password,
qVerify.password)>
Thanks in advanced!!!

Answer 1

Are you sure the password case is not getting changed in the
DB?
What happens if qVerify returns zero rows?
What happens if qVerify returns more than one row?
Have you looked up "SQL Injection" in google?
Other than all that (and the "select *"), your code looks
fine.