I am absolute beginner in creating database and I only know that we can use,
"SELECT * FROM users WHERE username = '$username' and password = '$password'"; but, what if there is multiple table in my SQL and I want to select them all?
can I just do,
"Select * from users where username = '$username' and password = '$password' and email = '$email' and address = '$address' and phone = '$phone'"; Here are my PHP script:
public function does_user_exist($username,$password,$email,$address,$phone){ $query = "Select * from users where username = '$username' and password = '$password' and email = '$email' and address = '$address' and phone = '$phone'"; $result = mysqli_query($this->connection, $query); if(mysqli_num_rows($result) > 0){ $json['success'] = 'Welcome '.$email; echo json_encode($json); mysqli_close($this->connection); } else { $query = "Insert into users(username, password, email, address, phone) values ('$username','$password','$email', '$address', '$phone')"; $is_inserted = mysqli_query($this->connection, $query); if ($is_inserted == 1){ $json['success'] = 'Account created, welcome '.$email; } else { $json['error'] = 'Wrong password '; } echo json_encode($json); mysqli_close($this->connetion); } } UPDATE
<?php require_once 'connection.php'; header('Content-Type: application/json'); class User { private $db; private $connection; function __construct() { $this->db = new DB_Connection(); $this->connection = $this->db->get_connection(); } public function does_user_exist($username,$password,$email,$address,$phone){ $query = ("Select * from users where username = '$username' and password = '$password' and email = '$email' and address = '$address' and phone = '$phone'"); $result = mysqli_query($this->connection, $query); if(mysqli_num_rows($result) > 0){ $json['success'] = 'Welcome '.$email; echo json_encode($json); mysqli_close($this->connection); } else { $query = "Insert into users(username, password, email, address, phone) values ('$username','$password','$email', '$address', '$phone')"; $is_inserted = mysqli_query($this->connection, $query); if ($is_inserted == 1){ $json['success'] = 'Account created, welcome '.$email; } else { $json['error'] = 'Wrong password '; } echo json_encode($json); mysqli_close($this->connetion); } } } $user = new User(); if (isset($_POST['username'], $_POST['password'], $_POST['email'], $_POST['address'], $_POSt['phone'])){ $username = $POST['username']; $password = $_POST['password']; $email = $_POST['email']; $address = $_POST['address']; $phone = $_POST['phone']; if(!empty($username) && !empty($password) && !empty($email) && !empty($address) && !empty($phone)){ $encrypted_password = md5($password); $user -> does_user_exist($username,$encrypted_password,$email,$address,$phone); } else { echo json_encode("You must fill all fields!") } } ?>
joins. dev.mysql.com/doc/refman/5.7/en/join.html Also look into using parameterized prepared statements. You don't want to really get into the habit of having variables in your queries. php.net/manual/en/mysqli.quickstart.prepared-statements.php