echappement fonction ..

<?php
//Connect To Database
$hostname='hostname';
$username='user';
$password='pass';
$dbname='dbname';
$usertable='usertable ';
$yourfield = 'login';
 
$dbc = @mysql_connect($hostname,$username, $password) OR DIE ('Unable to connect to database! Please try again later.');
mysql_select_db($dbname);
 
 
//select database
@mysql_select_db(db_name) or die ('could not not select the database: ' . mysql_error());
//creating funtion for escaping the  data
function escape_data ($data) {
 if (ini_get('magic_quotes_gpc')) {
 $data = stripslashes($data)
 
 //check for mysql_real_escape_string () support
 if (function_exists('mysql_real_escape_string')) {
 global $dbc;
 $data = mysql_real_escape_string
 (trim($data), $dbc);
 }else{
 $data = mysql_escape_string
 (trim($data));
 }
 return $data;
 }
 
$query = 'SELECT * FROM $usertable';
$result = mysql_query($query);
if($result) {
    while($row = mysql_fetch_array($result)){
        $name = $row['$yourfield'];
        echo 'Name: '.$name;
    }
}
?>

CREATE TABLE `login` (
 `id` int(1) NOT NULL auto_increment,
 `email` varchar(40) NOT NULL default '',
 `password` varchar(40) NOT NULL default '',
 PRIMARY KEY (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=3 ;

This is my database connection:

<?php
//Connect To Database
$hostname='host';
$username='user';
$password='pass';
$dbname='charismaevnts';
$usertable='charismaevnts ';
$yourfield = 'login';

$dbc = @mysql_connect($hostname,$username, $password) or die('Unable to connect to database! Please try again later.');
if(!mysql_select_db($dbname)) die('Database missing.');

// function used to escape data
function escape_data($data) {
  global $dbc;
  
  if (ini_get('magic_quotes_gpc')) {
    $data = stripslashes($data);
  }
  
  return mysql_real_escape_string($data, $dbc);
}

$sql = "SELECT * FROM {$usertable}";
$result = mysql_query($sql, $dbc);
if($result) {
  while($row = mysql_fetch_array($result)){
    echo 'Name: '.$row[$yourfield];
  }
}
?>

<?php
session_start();

// execute on form submit
if (isset($_POST['submitted'])) {
  $email = '';
  $errors = array();
  $password = '';
  
  // verify input
  if (empty($_POST['email'])) {
    $errors[] = 'You forgot to enter your email address.';
  }
  if (empty($_POST['password'])) {
    $errors[] = 'You forgot to enter your password.';
  }
  
  // validate data against database
  if (empty($errors)) {
    // database connection, handle: $dbc
    require_once ("configproject3.php");
    
    $email = escape_data($_POST['email']);
    $password = sha1($_POST['password']);
    
    // build query
    $sql = "SELECT id FROM login WHERE email = '".$email."' AND password = '".$password."' LIMIT 1;";
    $result = @mysql_query($sql, $dbc);
    
    // close database connection
    @mysql_close($dbc);
    
    // validate dataset
    if (@mysql_num_rows($result)) {
      $row = mysql_fetch_assoc($result);
      
      // write user data to session
      $_SESSION['id'] = $row['id'];
      $_SESSION['email'] = $email;
      $_SESSION['agent'] = md5($_SERVER['HTTP_USER_AGENT']);
      
      // set header
      header('Location: '.dirname($_SERVER['PHP_SELF']).'/loggedin3.php');
      exit;
    }
    
    $errors[] = 'The email address and/or password entered do not match those on file.';
  }
}

include ("header2.php");

// handle errors
if (!empty($errors)) { // Print any error messages.
  echo '<h1 id="mainhead">Error!</h1>
      <p class="error">
        The following error(s) occurred:<br />';
  foreach ($errors as $msg) { // Print each error.
    echo " - {$msg}<br />\n";
  }
  echo '  </p>
       <p>Please try again.</p>';
}
?>
<h2><p class="names">Login</p></h2>
<form action="login2.php" method="post">
  <table>
    <tr>
      <th>
        <p class="names">Email Address:</p>
      </th>
      <td>
        <input type="text" name="email" size="20" maxlength="40" />
      </td>
    </tr>
    <tr>
      <th>
        <p class="names">Password:</p>
      </th>
      <td>
        <input type="password" name="password" size="20" maxlength="20" />
      </td>
    </tr>
  </table>
  <p>
    <input type="submit" name="submit" value="Login" />
  </p>
  <input type="hidden" name="submitted" value="TRUE" />
</form>
<div class="footer">
<?php include ("footer.php"); ?>
</div>