[PHP]
session_start();
$connection = mysql_connect("localhost", "xxxx", "xxxxxxx");
$select_db = mysql_select_db("xxx", $connection);
$query = mysql_query ("SELECT username,password,id FROM members where id ='".$_SESSION["id"]."'", $connection);
$timestamp = time();
$activity = "Log in";
if(isset($_COOKIE['ID_my_site'])){
$_SESSION['log_admin']=$data['ID_my_site'];
$_SESSION['admin_access']=$data['id'];
$name = $_COOKIE['ID_my_site'];
$pass = $_COOKIE['Key_my_site'];
$check = mysql_query("SELECT username,password,id FROM members WHERE id = '$username'")or die(mysql_error());
while($info = mysql_fetch_array( $check ))
{
if ($pass != $info['password'])
{
header("Location: fail.php");
} else {
header("Location: 1.php");
//header("Location: welcome.php");
}
}
}
if (isset($_POST['submit'])) {
$usercheck = $_POST['username'];
$check = mysql_query("SELECT user FROM logged WHERE user = '$usercheck'")
or die(mysql_error());
$check2 = mysql_num_rows($check);
//if the name exists it gives an error
if ($check2 != 0) {
die('Sorry, '.$_POST['username'].' you already LOGGED ON..... on another machine <a href="index.html">Back</a>');
}
if(!$_POST['username'] || !$_POST['password']) {
header("Location: fail.php");
}
$check = mysql_query("SELECT username, password,name,surname FROM members WHERE username = '".$_POST['username']."'")or die(mysql_error());
//Gives error if user dosen't exist
$check2 = mysql_num_rows($check);
if ($check2 == 0) {
header("Location: fail.php");
} else {
while(list($username, $password,$name,$surname) = mysql_fetch_array( $check ))
{
$_POST['password'] = stripslashes($_POST['password']);
$password = stripslashes($password);
$_POST['password'] = md5($_POST['password']);
if ($_POST['password']!= $password) {
header("Location: fail.php");
} else {
$_POST['username'] = stripslashes($_POST['username'] && $_POST['password'] == $password);
$hour = time() + 3600;
setcookie("Use", $username);
setcookie("Name", $name);
setcookie("sur", $surname);
if ($rowsAffected != -1) {
$query ="INSERT INTO logged (lastactive,activity,user)
VALUES ('".$timestamp ."','".$activity."','".$_COOKIE['Use']."')";
$result = mysql_query ($query, $connection) OR die("Error ".mysql_errno()." : ".mysql_error());
$rowsAffected = @ mysql_num_rows($result);
}//close rows Affected
else if ($rowsAffected == -1 ){
}
header("Location: welcome.php");
}
}
}
}
[/PHP]
Is the code for where I get the login details .
63
