View difference between Paste ID: fEBrxYXp and qH5xyh76

-<?php
+<?php
-include 'database.php';
+
 // Inialize session
-$email = $_POST['email'];
+session_start();
-$password = $_POST['password'];
+
 // Include database connection settings
-if (!empty($_POST['email']) && !empty($_POST['password']))
+$hostname = 'localhost';        // Your MySQL hostname. Usualy named as 'localhost',                  so you're NOT necessary to change this even this script has already     online on the internet.
-{
+$dbname   = 'esca'; // Your database name.
-	$sql="SELECT * FROM tbl_customers_a156296 WHERE fld_customer_email = '$email' and fld_customer_password = '$password'";
+$username = 'root';             // Your database username.
-	$qid = mysql_query($sql);
+$password = 'user123';                 // Your database password. If your database has no         password, leave it empty.
-
+
-	if($login=mysql_fetch_array($qid))
+// Let's connect to host
-	{
+$connect = mysql_connect($hostname, $username, $password) or DIE('Connection to host is failed,       perhaps the service is down!');
-		$email=$login["email"];
+// Select the database
-		$password=$login["password"];
+mysql_select_db("esca") or DIE('Database name is not available!');
-		$_SESSION["email"]=$email;
+
-		$_SESSION["password"]=$password;
+
-		$_SESSION["auth"]=true;
+
-		header('Location:index2.php');
+// Retrieve username and password from database according to user's input
-		exit;
+$username=mysql_real_escape_string($_POST['user']);
 $password=mysql_real_escape_string($_POST['pass']);
-		/*
+$encrypted_mypassword=md5($password);
-		$cid=$login['cid'];
+$sql = "SELECT * FROM members WHERE (username = '$username') and (password = '$encrypted_mypassword')";
-		$fname=$login['fname'];
+$login = mysql_query($sql,$connect);
-		$_SESSION['fname']=$fname;
+
-		$_SESSION['cid']=$cid;
+if($login)
-		$_SESSION['auth']=true;
+$count = mysql_num_rows($login) ;
-		header('Location:index2.php');
+
-		exit;
+else
-		*/
+  die("something failed");
-	}
+
-	else {
+// Check username and password match
-		//header ('Location:failurelogin.php');
+
-		echo "Maaf, Log Masuk tidak berjaya";
+ while($row = mysql_fetch_assoc($login)){
-	}
+					$_SESSION['username'] = $_POST['user'];
 					$_SESSION['nama'] = $row['nama'];
 					$_SESSION['level'] = $row['typeuser'];
 					$type = $_SESSION['level'];
 				}
 
  if ($count != "") {
 
 			 switch ((int)$type) {
 				case 4:
 				 $_SESSION['start'] = time();
 				$_SESSION['expire'] = $_SESSION['start'] + (3 * 6);
 
 					header('Location: /esca/user'); // admin Level;
 					break;
 				case 3:
 				 $_SESSION['start'] = time();
 				$_SESSION['expire'] = $_SESSION['start'] + (30 * 60);
 					header('Location: /esca/mrd');
 					break;
 
 				default:
 				 $_SESSION['start'] = time();
 				$_SESSION['expire'] = $_SESSION['start'] + (30 * 60);
 					header('Location: /esca/contr');
 			}
 
 
 }
 else {
 // Jump to login page
 session_destroy();
 header('Location:/esca/page/login.php');
 }
 
 
 
 
 ?>