Untitled

<?php
  session_start();

  include_once('fuggvenyek.php');

  funtion login()
  {
    if($_POST[x]>0 || $_POST[x]<=144 && $_POST[y]>0 || $_POST[y]<=61 && isset($_POST[reg]))
    {
      $db = 'kamion';
      $user = '';
      $pass = '';
      $kapcsolat = mysql_connect($host,$user,$pass) or die ('Hiba! '.mysql_error($kapcsolat));
      mysql_select_db($db,$kapcsolat) or die ('Hiba! '.mysql_error($kapcsolat));

      $user = mysql_real_escape_string($_POST[user]);
      $password = mysql_real_escape_string($_POST[password]);

      $query = "SELECT * FROM user WHERE login_name='$user' and password='$password'";
      $result = mysql_query($query);
      $eredmeny = mysql_fetch_array($result);

      if(mysql_num_rows($result) > 0)
      {
    $_SESSION[uid] = $eredmeny[0]; //felhasznalo azonosito - erre meg szukseged lehet
    $_SESSION[userx] = $user; //felhasznalonev

    header("Location: forum/tema.php?fid=$_SESSION[fid]");
    exit;
      }
      elseif(empty($user) || empty($password))
      {
    $_SESSION[error]='<center><font color="red" size="4"><b>Felhasználó/Jelszó kitöltése kötelező!</b></font></center>';
      }
      elseif(!empty($user) || !empty($password))
      {
    $_SESSION[error]='<center><font color="red" size="4"><b>Hibás felhasználó név/jelszó!</b></font></center>';
      }
    }
  }

  $_SESSION[fid] = $_GET[fid];

  if (isset($_POST[user])) login;
  if(!empty($_SESSION[uid])) { header("Location: forum/tema.php?fid=$_SESSION[fid]"); exit; }

?>


<html>
<head>
<title>Belépés</title>
</head>
<body bgcolor="white">
<h2 align="center"><font color="red" face="space age">Belépés</font></h2>
<center>
<br><br>
<form name="login" method="POST" action="belepes.php">
<table width="30%" border="0" cellspacing="3" cellpadding="3">
<tr>
<td align="left"><b><font color="blue" size="3" face="space age">FELHASZNÁLÓ:</font></b></td>
<td><input type="text" name="user" value="" size="25"></td>
</tr>
<tr>
<td align="left"><b><FONT color="blue" size="3" face="space age">JELSZÓ:</font></b></td>
<td><input type="password" name="password" value="" size="25"></td>
</tr>
<tr>
<td><br><br><input type="HIDDEN" name="reg" value="reg"></td>
</tr>
<tr>
<td align="left"><input type="image" img src="belepes.gif" onclick="javascript: login.submit()"></td>
<td align="right"><a href="regisztracio.php"><img src="regisztracio2.gif" border="0"></a></td>
</tr>
</table>
<br>
</form>
</center>
<br><br><br>

<?php if isset($_SESSION[error]) { echo $_SESSION[error]; unset($_SESSION[error]); } ?>

</body>
</html>