View difference between Paste ID: acPDNPYK and 5UGcdTkR

 <form method="post">
 Username: <input type="text" name="username"><br>
 Password: <input type="password" name="password">
 <input type="submit" name="submited" value="přihlásit">
 </form>
 <?php
 if(isset($_POST['submited']))
 {
 try{
-$dbh = new PDO('mysql:host=mysql5-4;dbname=weed_110287', "weed.110287", "lol-neukážu!", array(PDO::ATTR_PERSISTENT => true));
+$query = $dbh->prepare("SELECT * FROM users WHERE login = :username LIMIT 1");
-$dbh->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+
-$query = $dbh->prepare("SELECT * FROM users WHERE login = :username");
+
 $result = $query->fetchAll();
 
 if(!empty($result)){
   foreach($result as $row){
     if(sha1($_POST['password']) == $row['pwdhash'])
       {
         $_SESSION["logged"] = 1;
         $_SESSION["uid"] = $row['uid'];
-        echo 'Login succesfull!';
+        $_SESSION["login"] = $row['login'];
         $_SESSION["urole"] = $row['roleid'];
         echo 'Login succesfull as '.$_SESSION["login"].'!';
       }
     else
       {
       echo 'Login failed.';       /*špatné heslo*/
       }
     }
 }
 else echo 'Login failed.'; /*uživatel neexistuje*/
 
 }
 catch(PDOException $e)
     {
     echo $e->getMessage();
     }
 }
 
 ?>