一个非常简单的查询不适用于PHP

Question

i have a little problem with a very simple query , when i hard code the values in the query its working , but when i use a PHP variable nothing is retrieved , i over check a lot of things including the query , the database it worth saying that i'm getting the variable from a form by POST and also checked that i'm getting them but when i use them in a query they jst dont work :S

here's my code ..PLZ what am i doing wrong ?!!!!!!!!!!!

  <?php 

 $email = $_POST ['emailEnter'] ; 
$password = $_POST ['passwordEnter'];


$connection = mysql_connect('localhost','root','') ;

$db_selected = mysql_select_db("lab5" , $connection) ;

$query = 'select * From user where email="$email" and password="$password" ' ;
$result = mysql_query ($query , $connection);
    while($row=mysql_fetch_array($result))
    {
        echo $row['name'];
    }
mysql_close($connection);       
?>

Answer 1

The basic debugging steps are 1. adding

if (!$result) echo "Error: ".mysql_error();

to see any errors from the SQL query and 2. outputting

echo "Query: $query";

to see what the variables contain. One of these will point you to the problem.

Also, your query is vulnerable to SQL injection. You should add a

$email = mysql_real_escape_string($email);
$password = mysql_real_escape_string($password );

after fetching the values from the POST array.