Untitled

<?PHP
	$db_host="localhost";
	$db_user="root";
	$db_password="";
	$db_name="versandhandel";

	$db=new PDO("mysql:host=$db_host; dbname=$db_name; charset=utf8", $db_user, "");
	$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_WARNING);
	print_r($_POST);
	print_r($_GET);
?>

<!DOCTYPE html>
<html>
	<head>
	<meta charset="utf-8" />
		<title> </title>
	</head>
	<body>
		<h3>selectfield</h3>
		<form method="POST" action="">
			Benutzername: <input type="text" name="benutzername" /><br />
			Passwort: <input type="text" name="passwort" /><br />
			<input type="submit" name="send" value="Absenden" />
		</form>
		<table border="3">
				<tr>
					<td>Nachname</td>
					<td>Vorname</td>
					<td>Strasse</td>
					<td>PLZ</td>
					<td>Ort</td>
					<td>Fehlversuche</td>
				</tr>
		<?PHP
			$sql="SELECT * FROM tkunde WHERE Benutzername = :fbn AND Passwort = :fpw";
			$stmt=$db -> prepare($sql);
			$stmt->bindParam('fbn',$_POST['benutzername'],PDO::PARAM_INT);
			$stmt->bindParam('fpw',$_POST['passwort'],PDO::PARAM_INT);
			$stmt -> execute();
			$anzahl=$stmt->rowCount();

			while($row = $stmt -> fetch(PDO::FETCH_ASSOC)) {
				echo "<tr>";
					echo "<td>" .$row['Nachname'] ."</td>";
					echo "<td>" .$row['Vorname'] ."</td>";
					echo "<td>" .$row['Strasse'] ."</td>";
					echo "<td>" .$row['PLZ'] ."</td>";
					echo "<td>" .$row['Ort'] ."</td>";
					echo "<td>" .$row['Fehlversuche'] ."</td>";
				echo "<tr>";
			}

			if(isset($_POST['submit'])){
				if(($_POST['benutzername'])!=""){
					if($anzahl==0){
						$sql="INSERT INTO tkunde SET Fehlversuche = \"1\"";
					}
				}
			}

			//if(isset($_POST['benutzername'])){
			//	if(strtoupper($_POST['benutzername'])==strtoupper($row['benutzername'])){
			//		echo"hallo";
			//	}
			//	else{
			//		echo"am";
			//	}
			//}
		?>
		</table>

	</body>
</html>