<?php // Login Script

if (!isset($_SESSION['user'])) { $showcontent = false; }
if (isset($_REQUEST['attempt']))

{


    $link = mysql_connect('localhost', 'root', '') or die('Fejl i databasen, prøv igen senere.');
    mysql_select_db('users');

    $user = mysql_real_escape_string($_POST['user']);
    $pass = sha1(mysql_real_escape_string($_POST['pass']));


    $query = mysql_query("
                    SELECT      user
                FROM        users
                WHERE       user = '$user'
                AND     password = '$pass'

            ")
                or die(mysql_error());

    $approvement = mysql_num_rows($query);
    if ($approvement > 0) { session_start(); $_SESSION['user'] = 'approved'; $showcontent = true; }
    }

?>

<form method="post" action="default.php?attempt">
    <p>Brugernavn</p> <input type="text" name="user" /><br />
    <p>Password</p>   <input type="password" name="pass" />
    <input type="submit" value="Login!" />
</form>