0
maybe someone can tell the problem?
also.. maybe theres a way to shorten and improvise this code a bit?
function do_login()
{
$username = mysql_real_escape_string($_POST[username]);
$password = md5(mysql_real_escape_string($_POST[password]));
$checklogin = mysql_query("SELECT * FROM users WHERE Username = '".$username."' AND Password = '".$password."'");
if(mysql_num_rows($checklogin) == 1)
{
$r = mysql_fetch_array($checklogin);
session_start();
$_SESSION[Username] = $username;
$_SESSION[EmailAddress] = $r[EmailAddress];
$_SESSION[LoggedIn] = 1;
$_SESSION[UserType] = $r[UserType];
echo '<h2>Now logged in!</h2>';
echo '<p>You are now logged in. Redirecting you to the recent entries</p>';
echo $_SESSION[Username];
}
else
{
echo '<p><b>Error</b>: Your account could not be found. Please try again</p>';
echo login_form();
}
}
function login_form()
{
echo '<h2>Login</h2>
<p>Use your login information given to you.</p>
<form method="post" action="?page=login" name="loginform" id="loginform">
<p>Username:<br /><input type="text" name="username" id="username" /></p>
<p>Password:<br /><input type="password" name="password" id="password" /></p>
<p><a href="?page=forgotpass">Forgot Password?</a><br />
<input type="submit" name="login" class="button" value="Login" /></p>
</form>';
}
function do_logout()
{
$_SESSION = array();
session_destroy();
echo '<h2>Now Logged Out</h2>';
echo '<p>Redirecting you to login page.</p>';
echo "<script language=\"javascript\">setTimeout(\"location.href='?page=login', 3000\");</script>";
}
