小编Cas*_*cks的帖子

在我的网站上,我有一个页面只有在人员详细信息位于名为Members的表中才能查看,这些值是从上一页的表单中发布的.这是我的原始代码,它运行良好:

$query = "SELECT * FROM Members WHERE firstname='" . $firstname . "' and surname='" . 
$surname. "'"; 
$result = mysql_query($query);
$rows = mysql_num_rows($result);

if ($rows == 1) 
{ 
   //user continues loading page
} 
else 
{ 
   header ('location: signup.html'); //user is redirected to sign up page 
}

在对网站进行一些更改后,我现在要求同一个用户必须在Members表中使用paid ='TRUE'才能继续加载页面.这是我提出的代码:

$query = "SELECT * FROM Members WHERE firstname='" . $firstname . "' and surname='" . 
$surname. "'"; 
$result = mysql_query($query);
$rows = mysql_num_rows($result);

$query = "SELECT paid FROM Members WHERE firstname='" …