login.php

<?php


include_once("/templates/index_lo.tpl");
include_once("/templates/login.tpl");
include_once("db.php");


if(isset($_POST['l_button']))
{

$nname = $_POST['l_username'];
$query = "SELECT * FROM user WHERE username = '".$nname."'";

$result = mysqli_query($db,$query);

while ($row = mysqli_fetch_object($result)) {

  $li_name = $row->username;
  $li_pw = $row->password;
}

if(mysqli_num_rows($result) == 0)// Kein User vorhanden
{

  ?>
  <html>
  <body>

    <div class="lg-alert" style="padding-left: 50px; padding-right: 50px">
    <div class="alert alert-danger alert-error">
        <strong>Fehler!</strong> Benutzer wurde nicht gefunden!<br>
    </div></div>

  </body>

  </html>

  <?php
   return;
}

if($_POST['l_password'] != $li_pw)
{
  ?>
  <html>
  <body>


   <div class="lg-alert" style="padding-left: 50px; padding-right: 50px">
    <div class="alert alert-danger alert-error">
        <strong>Fehler!</strong> Falsches Passwort!<br>
    </div></div>
  </body>

  </html>
  <?php
}

else {
  ?><html>
  <body>
  <div class="alert alert-success">
    <a href="#" class="close" data-dismiss="alert">&times;</a>
    <strong>Login:</strong> Erfolgreich eingeloggt!
</div>
</body>
</html>
<?php
    $_SESSION['loggedin'] = 2;
    $_SESSION['loggedname'] = $_POST['l_username'];
?>
<script language="javascript">
  setTimeout ("forwarding()",2000);
  function forwarding() {
    window.location.href = "index.php?section=index"
  }
</script>
<?php
  return;
}

 }


?>