problem_1

Problem 1

<?php
    session_start();
    if(isset($_SESSION['logged']) === true)
    {
        header('Location: log_index.php');
        exit;
    }
?>
<!DOCTYPE html>

<html>
    <head>
        <meta charset="UTF-8">
        <title></title>
    </head>
    <body>
        <form action="login.php" method="post">
            Name:<input type="text" name="login">
            Password:<input type="text" name="pass">
            <input type="submit" value="Submit">
            <input type="hidden" name="go_log" value="1">
        </form>
    </body>
</html>
_______________________________________
<?php
include 'common.php';
if($_SESSION['logged']!==true)
{
    if($_POST['go_log']==1)
    {
        $name= addslashes(trim($_POST['login']));
        $pass=trim($_POST['pass']);
        if(strlen($name)>3 && strlen($pass)>3)
        {
            $rs = run_q('SELECT * FROM users WHERE login ="'.$name.'"AND password="'.md5($pass).'"');
            if(mysql_numrows($rs)==1)
            {
                $row = mysql_fetch_assoc($rs);
                $_SESSION['logged'] = true;
                $_SESSION['user_id'] = $row['user_id'];
                $_SESSION['login'] = $row['login'];
                header('Location: log_index.php');
                exit;
            }
        }
    }
}
header('Location: index.php');
exit;
 __________________________________________
<?php
session_start();
mysql_connect('localhost','vandal','codein') or die('SYSTEM FAILURE!');
mysql_select_db('users_data') or die('NO DATABASE!');

function run_q($sql)
{
    mysql_query('SET NAMES UTF8');
    $rs = mysql_query($sql);
    if(mysql_error())
    {
        echo mysql_errno()+'SQL:'+$sql;
    }
    return $rs;
}
?>

<?php
echo 'Works!';
?>