Untitled

<?php
session_start();
 ?>
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en">
	<head>
		<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />
	</head>
	<body bgcolor="turquoise" link="#00FF00" alink="#43FF00" vlink="#0033FF" background="141.jpg" style="
	background-color: rgb(64, 224, 208);
	background-image: (D:\home\diplom\www\Biogaz.jpg);
	background-repeat: no-repeat;
	background-size: cover;
	">
<?

	mysql_connect("127.0.0.1", "root") or die;
	mysql_select_db("Diplom");
	if (!mysql_select_db("Diplom"))
	{
		mysql_error();
	}
	mysql_query("SET NAMES UTF8");


	if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST["login"] )){
		$sqltext = "SELECT * FROM sotrudniki WHERE login='".$_POST["login"]."' AND parol='".$_POST["password"]."'";
		$rs=mysql_query($sqltext);
		echo $sqltext;
		if (!mysql_query($sqltext))
		{
			mysql_error();
		}
		if (mysql_num_rows($rs)){
			$ar = mysql_fetch_array($rs);
			$_SESSION["kod_sotrudnika"] = $ar["kod_sotrudnika"];
		}else
			$_SESSION["kod_sotrudnika"] = "";
	}

	if (!$_SESSION["kod_sotrudnika"]){
		echo '<form method="POST">
			<input type="edit" name="login"/><br/>
			<input type="password" name="password"/><br/>
			<input type="submit" value="sent"/><br/>
		</form>';
		exit();
	}
	else
		echo 'You authorized as: '.$_SESSION["kod_sotrudnika"];
		error_reporting(-1);

?>