$user=trim(htmlspecialchars(mysql_real_escape_string($_POST['username'])));
$pass=trim(htmlspecialchars(mysql_real_escape_string($_POST['pass'])));

$query = mysql_query("SELECT * FROM  user WHERE name = '$user' AND pass = '".sha1($pass)."'");

if(mysql_fetch_assoc($query))
	{
	$key_supply = "0123456789qwertzuiopasdfghjklyxcvbnm";
	for($i=0;$i<50;++$i)
		 $rsa.=$key_supply{rand(0, strlen($key_supply))};
	mysql_query("UPDATE user SET key='".$rsa."'");
	setcookie("rsa", $rsa, time()+604800, "/");
	echo "üdv";
	}

else {
		echo "nem vagy bejelentkezve";
	}