Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- include("mysql.php");
- $user = mysql_escape_string($_POST["user"]);
- $passs = mysql_escape_string($_POST["pass"]);
- $pass = sha1($passs);
- session_start();
- $query="SELECT user, pass FROM users WHERE user='$user' AND pass='$pass' ";
- $q=mysql_query($query) or die(mysql_error());
- $row=mysql_fetch_assoc($q);
- if(sha1($row['pass']) != $pass) {
- echo "<SCRIPT language='JavaScript'>alert('Uporabniško ime ali geslo ni bilo pravilno. Preusmerjen boš nazaj.');</SCRIPT>";
- $_SESSION['logedin']= "0";
- echo "<meta HTTP-EQUIV='REFRESH' content='0; url=index.html'>";
- } else {
- $username = $row['user'];
- $_SESSION['logedin']= "1";
- $_SESSION['id'] = $username;
- $_SESSION['stuffForSecurity']="SOME STUFF";
- echo "<meta HTTP-EQUIV='REFRESH' content='0; url=user/'>";
- }
- ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement