<?php
    session_start();
    if (isset($_POST['submit'])) {
        include('sqlconn.php');
        $mail = mres($_POST['mail']);
        $pass = mres($_POST['pass']);
        if ($db) {
            $query = "SELECT * FROM `users` WHERE mail='$mail' AND pass='$pass'";
            $result = mysql_query($query);
            if ($result) {
                $result = mysql_fetch_array($result,MYSQL_ASSOC);
                if ($result['mail'] && $result['pass']) {
                    $_SESSION['nom'] = stripslashes($result['prenom']).' '.stripslashes($result['nom']);
                    $_SESSION['mail'] = stripslashes($result['mail']);
                    $_SESSION['id'] = stripslashes($result['id']);
                    $form_ok = true;
                }
                else {
                    $erreur = '<li><span class="txterror">Mail incorrect et/ou mot de passe incorrect.</span></li>';
                }
            }
            else die(mysql_error());
        }
        else die(mysql_error());
        mysql_close($conn);
    }
    function mres($val) { return mysql_real_escape_string($val); }
?>