Untitled

<!-- dbase.php -->
<!-- To connect between php scripting and database. -->
<?php

define("DATABASE_HOST", "localhost");
define("DATABASE_USER", "root");
define("DATABASE_PASSWORD", "");

// To establish a connection to database and save in $conn
$conn = mysql_connect(DATABASE_HOST,DATABASE_USER, DATABASE_PASSWORD);

// If connection failed then display mysql error
if (!$conn){
   die( "Could not connect to database" );
}

// To select one particular database to be used
mysql_select_db("internship", $conn) or die( "Could not open PEMS database" );

?>

<?php
/*
    Filename: authenticatoraAdmin.php
    Purpose: To verify user identity in accessing this website.
    Note: Include this file in every protected page to avoid
            unauthorized user enter.
*/
    //Start session
    session_start();

    //Check whether the login status is true or not
    if(!isset($_SESSION['STATUS_ADMIN']) || !$_SESSION['STATUS_ADMIN'] == true) {
        header("location: login-failed.html");
        exit();
    }
?>

<?php
/*
 Purpose: To handle login information and create a session for that user.
*/

 // Start session
 session_start();

 // Validation error flag
 $errflag = false;

 // Input Validations
 if($_POST['username'] == '') {
  $errmsg_arr[] = 'Username missing';
  $errflag = true;
 }
 if($_POST['password'] == '') {
  $errmsg_arr[] = 'Password missing';
  $errflag = true;
 }

 // If there are input validations, redirect back to the login form
 if($errflag) {
  $_SESSION['ERRMSG_ARR'] = $errmsg_arr;
  session_write_close();
  header("location: index.php");
  exit();
 }

 // to make a connection with database
 $conn = mysql_connect("localhost", "root", "") or die(mysql_error());

 // to select the targeted database
 mysql_select_db("internship", $conn) or die(mysql_error());

 // to create a query to be executed in sql
 $username = $_POST['username'];
 $password =$_POST['password'];
 $query = "SELECT * FROM admin WHERE id_no = '$username' AND password = '$password'";

 // to run sql query in database
 $result = mysql_query($query, $conn) or die(mysql_error());

 // Check whether the query was successful or not
 if(isset($result)) {
  if(mysql_num_rows($result) == 1 ) {
    // Login Successful
    session_regenerate_id();
    $member = mysql_fetch_assoc($result);
    $_SESSION['SESS_USERNAME'] = $member['id_no'];
    $_SESSION['SESS_NAME'] = $member['admin_name'];
    $_SESSION['STATUS_ADMIN'] = true;
    session_write_close();
    header("location: pageAdmin.php");
    exit();
  }
  else {
   // Login failed
   header("location: login-failed.html");
   exit();
  }
 }
 else {
  die("Query failed");
 }

 ?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>

<link rel="stylesheet" type="text/css" href="splitmenubuttons.css" />

<script type='text/javascript' src='https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js'></script>

<script src="splitmenubuttons.js">

/* Split Menu Buttons: created: Aug 8th, 2012 by DynamicDrive.com. This notice must stay intact for usage
*  Author: Dynamic Drive at http://www.dynamicdrive.com/
*  Visit http://www.dynamicdrive.com/ for full source code
*/

</script>

<script>

jQuery(function(){ // on document load
    $('a[data-showmenu]').splitmenubuttonMenu() // Add split button menu to links with "data-showmenu" attr
})

</script>


<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>#</title>
<meta name="keywords" content="global, business, css templates, website templates, CSS, HTML" />
<meta name="description" content="Global - free CSS template provided by templatemo.com" />
<link href="templatemo_style.css" rel="stylesheet" type="text/css" />
 <script type="text/JavaScript" src="js/slimbox2.js"></script>
     <script type="text/javascript" src="js/jquery.js"></script>
     <script type="text/javascript" src="js/cufon-yui.js"></script>
     <script type="text/javascript" src="js/arial.js"></script>
     <script type="text/javascript" src="js/cuf_run.js"></script>
     <script type="text/javascript" src="js/radius.js"></script>

     <script>
    function Validate()
    {
        if (document.loginForm.username.value == '')
        {
            alert('Please insert your username!');
            document.loginForm.username.select();
            document.loginForm.username.focus();
            return false;
        }
        if (document.loginForm.password.value == '')
        {
            alert('Please insert your password!');
            document.loginForm.password.select();
            document.loginForm.password.focus()
            return false;
        }
        if (document.loginForm.leveling.value == '')
        {
            alert('Please select your categories!');
            document.loginForm.leveling.focus();
            return false;
        }
        return true;
    }
</script>

<script>
    function LoginCategory()
    {
        if(document.loginForm.leveling.value=="Admin")
        {
            document.loginForm.action="sessionHandlerAdmin.php";
            document.loginForm.submit()
            return (true);
        }
        else if(document.loginForm.leveling.value=="User")
        {
            document.loginForm.action="sessionHandlerUser.php";
            document.loginForm.submit()
            return (true);
        }
    }
</script>

</head>
<body>
<div id="templatemo_wrapper">
<div id="templatemo_header">
<div id="templatemo_menu">


</div> <!-- end of templatemo_menu -->
<div id="site_title">
<h1>&nbsp;</h1>
<table width="900" height="200" border="0" align="right" cellpadding="0" cellspacing="0">

</table>
<h1><br />
</h1>
</div> <!-- end of site_title --></div> <!-- end of templatemo_header -->
<div id="templatemo_main">
  <table width="869" border="0" align="center" cellpadding="0" cellspacing="0">

   </table>
   <div class="content">
     <div id="form_wrapper" class="form_wrapper"></div>
     <div class="clear"></div>
   </div>
   <table width="310" height="313" border="1" align="center">
   <br />
   <br />
     <tr>
       <td width="300"height="200"><form method = "post" id = "loginForm" name="loginForm" onsubmit="return Validate()"
        style = "font-size: 12pt">
         <p align="left"><strong>Username:</strong>
           <input id = "username" name = "username" class="text" />
           <br />
           <br />
           <strong>Password:</strong>
           <input id = "password" name = "password" class="text" type="password" />
           <br />
           <br />
           <strong>Category:</strong>
           <select name="leveling" >
             <option value="">----Select----</option>
             <option value="Supervisor">ADMIN</option>
             <option value="Student">USER</option>
             </select>
           <br />
           <br />
           <center>
           <input type = "submit" value = "Login" onclick="return LoginCategory()" />
           <input type = "reset" value = "Reset" />
           </p>
          </form>
         </a> <br />
         </p></td>
     </tr>
   </table>
   <p>&nbsp;</p>
   <table width="747" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#000000" >


   </table>

    <tr>
      <td colspan="4" align="left" valign="top" class="horizon_divider">&nbsp;</td>
    </tr>


  <!-- end of content -->
    <div class="cleaner"></div>

</div> <!-- end of templatemo_main -->


</div>  <!-- end of templatemo_wrapper -->
</body>
</html>