View difference between Paste ID: 5MWkSszM and w0kP15fr

 <?php
 	$username = $_REQUEST["txt_username"];
 	$password = $_REQUEST["txt_password"];
 
 	$host = "127.0.0.1";
 	$user = "root";
 	$pass = "12157114";
 
 	try {
 		$dbh = new PDO("mysql:host=$host;dbname=logansarchive", $user, $pass);
 		$dbh->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
 	}
 	catch(PDOException $e) {
 		echo $e->getMessage();
 	}
 
 	$hashed_pass = substr(sha1($password), 0, 10);
-	$sql = "select * from admin where adminname = :name and password = :pass";
+
-	//echo $sql."<br />Count: ";
+	$sql = "select count(*) as count, adminid, adminname, lastlogin from admin where adminname = :name and adminpass = :pass";
 	$result = $dbh->prepare($sql);
 
 	$result->bindParam(":name", $username);
 	$result->bindParam(":pass", $hashed_pass);
 
-	$result->execute();
+	$row = $dbh->query($sql)
-	$count = $result->fetchAll();
+	if ($row["count"] == 1) {
 		$_SESSION["adminid"] = $row["adminid"];
-	//$link = mysql_connect($host, $user, $pass);
+		$_SESSION["adminname"] = $row["adminname"];
-	//mysql_select_db("logansarchive", $link);
+		$_SESSION["lastlogin"] = $row["lastlogin"];
-	//$result = mysql_query("select * from admin where adminname = '".$username."' and password = '".$hashed_pass."'", $link);
+
-	//$numrows = mysql_num_rows($result);
+		$dbh = null;
 		header("Location: /logansarchive/admin/index.php");
-	//$link = null;
+
-	//$result = null;
+
 		$dbh = null;
-	if ($count == 1) {
+
-			foreach ($dbh->query($sql) as $row) {
+
-			$_SESSION["adminid"] = $row["adminid"];
+
-			$_SESSION["adminname"] = $row["adminname"];
+
-			$_SESSION["lastlogin"] = $row["lastlogin"];
+