Untitled

<?php
  session_start();

  $_SESSION[fid] = $_GET[fid];
  if(!empty($_SESSION[uid])) header("Location: forum/tema.php?fid=$_SESSION[fid]");


  if (isset($_POST[user]))
  {
    $db = 'kamion';
    $user = '';
    $pass = '';
    $kapcsolat = mysql_connect($host,$user,$pass) or die ('Hiba! '.mysql_error($kapcsolat));
    mysql_select_db($db,$kapcsolat) or die ('Hiba! '.mysql_error($kapcsolat));

    include_once('fuggvenyek.php');

    $user = mysql_real_escape_string($_POST[user]);
    $password = mysql_real_escape_string($_POST[password]);

    $query = "SELECT * FROM user WHERE login_name='$user' and password='$password'";

    if($_POST[x]>0 || $_POST[x]<=144 && $_POST[y]>0 || $_POST[y]<=61 && isset($_POST[reg]))
    {
      $result = mysql_query($query);
      $eredmeny = mysql_fetch_array($result);
      if(mysql_num_rows($result) > 0)
      {
    $_SESSION[uid] = $eredmeny[0]; //felhasznalo azonosito - erre meg szukseged lehet
    $_SESSION[userx] = $user; //felhasznalonev

    header("Location: forum/tema.php?fid=$_SESSION[fid]");
    exit;
      }
      elseif(empty($user) || empty($password))
      {
    $error = '<center><font color="red" size="4"><b>Felhasználó/Jelszó kitöltése kötelező!</b></font></center>';
      }
      elseif(!empty($user) || !empty($password))
      {
    $error = '<center><font color="red" size="4"><b>Hibás felhasználó név/jelszó!</b></font></center>';
      }
    }
  }

?>


<html>
<head>
<title>Belépés</title>
</head>
<body bgcolor="white">
<h2 align="center"><font color="red" face="space age">Belépés</font></h2>
<center>
<br><br>
<form name="login" method="POST" action="belepes.php">
<table width="30%" border="0" cellspacing="3" cellpadding="3">
<tr>
<td align="left"><b><font color="blue" size="3" face="space age">FELHASZNÁLÓ:</font></b></td>
<td><input type="text" name="user" value="" size="25"></td>
</tr>
<tr>
<td align="left"><b><FONT color="blue" size="3" face="space age">JELSZÓ:</font></b></td>
<td><input type="password" name="password" value="" size="25"></td>
</tr>
<tr>
<td><br><br><input type="HIDDEN" name="reg" value="reg"></td>
</tr>
<tr>
<td align="left"><input type="image" img src="belepes.gif" onclick="javascript: login.submit()"></td>
<td align="right"><a href="regisztracio.php"><img src="regisztracio2.gif" border="0"></a></td>
</tr>
</table>
<br>
</form>
</center>
<br><br><br>

<?php echo $error; ?>

</body>
</html>