PHP correspondence Search, seek guidance

PHP correspondence lookup, seek guidance
Want to retrieve the password by user name and question, where is the wrong way to write it?

(The user name in the known database is not duplicated)



$username = $_post[' username ');
$fquestion = $_post[' fquestion ');
$answer = $_post[' answer ');


Include (' conn.php ');
mysql_query ("Set character set ' GBK '");
mysql_query ("Set names ' GBK '");

$sql = "Select *from user where Username= '". $username. "' and Answer= '". $answer. "' ";
$result =mysql_query ($sql);
$num =mysql_num_rows ($result);

if ($num >0)
{

echo "Your password is [' Password ']";

echo "Click here to log in";

}

?>

------Solution--------------------

*from user where Username= ' ". $username." ' and Answer= ' ". $answer." ' ";

* There's a space missing behind
------Solution--------------------
You're just
$result =mysql_query ($sql); Execute Query
$num =mysql_num_rows ($result); Read result set record Count
if ($num >0)//judgment has been found
{
echo "Your password is [' Password ']";

did not read the results of the query

