Untitled

<?php

$username= $_POST['username'];
$password= $_POST['password'];


function login()
	{
		$username= $_POST['username'];
		$password= $_POST['password'];

		// CONTROLLO PASSOWORD
		if ($username == NULL)
		{
		die("please insert a username");
		}
		if ($password == NULL)
		{
		die("please insert a password");
		}
		//ESCAPE DEI CARATTERI
		$username = mysql_real_escape_string($username);
		$password = mysql_real_escape_string($password);
		//ENTRIAMO NEL DATABASE
		$query = "SELECT id FROM users WHERE username ='$username' AND password = md5('$password')";
		$result = mysql_query($query);
		//CONTROLLO SE LA QUERY E' ESATTA
		if (!$result)
		{
		die("Controlla la query al database");
		}
		$record = mysql_fech_array($result);
		// CONTROLLO, UNA VOLTA MODIFICATO IL VALORE IN ROW SE ESISTE
		if (!$record)
		{
		die("Username or Password sbagliati");
		}
		else
		{
		die("Benvenuto" . $username ."Hai effettuato il Login alle: " . date(Y-m-d));
		};
	};


$connection = mysql_connect("localhost","sparkon","");
mysql_select_db("my_sparkon");

	if (!$connection)
	{
	die("Cannot connect to the database" . mysql_error());
	}
	else
	{
	login($username,$password);
	};

?>

<html>
<head>
<title>LOGIN</title>
</head>
<body>
<form action="login.php" method="post">
<table>
<tr><td>
Username : <input type="text" name="username" />
</tr></td>
<tr><td>
Password : <input type="password" name="password" />
</tr></td>
</table>
<input type="button" name="submit" value="Submit" />
</form>
</body>
</html>