I try to write a stored procedure that finds the user in table and returns him. But the procedure always returns entire table.
DELIMITER //
DROP PROCEDURE IF EXISTS `login`
CREATE PROCEDURE `login`(IN login VARCHAR(20), IN password VARCHAR(32))
BEGIN
SELECT * FROM `users` WHERE `login` = login AND `password` = password;
END
//
DELIMITER ;
What's wrong?