Untitled

<?php
if($_POST['action']=='login') {

    public function login($username, $password, $hash = true, $post = false) {
        if (!$hash) {
            $password = $this->hash($password);
        }
        $this->services->prepare("SELECT *
                                FROM anope_ns_core
                                WHERE display = :username
                                LIMIT 1")
                ->bindValue('username', $username)
                ->execute();
        if ($this->services->num_rows() == 1 && $user = $this->services->fetch_assoc()) {
            if (substr(bin2hex($user['pass']), 0, 40) === $password) {
                $user['password'] = substr(bin2hex($user['pass']), 0, 40);
                $this->_loggedIn = true;
                foreach ($user as $key => $value) {
                    $this->_information[$key] = $value;
                    $_SESSION['user'][$key] = $value;
                }
                setcookie('FServices', $user['display'] . '|' . hash('sha512', $user['display'] . $user['password'] . $_SERVER['REMOTE_ADDR']), time() + 2592000, '/', '', '', 1);
                return true;
            } else {
                return false;
            }
        }
        return false;
    }
}

?>

<?php
// Session starten
session_start ();

if($_POST['action']=='login')
{
    // Datenbankverbindung aufbauen
    $connectionid = mysql_connect ('localhost', '', '');
    if (!mysql_select_db ('anope', $connectionid))
        die ('Database not available');

    $sql = "SELECT * FROM anope_ns_core WHERE display = '".$_POST['user']."' LIMIT 1";
    if (mysql_num_rows($result) == 1 && $result = mysql_query ($sql))
    {
        if (substr(bin2hex($result['pass']), 0, 40) === md5($_POST['pass'])) {
      // Benutzerdaten in ein Array auslesen.
      $data = mysql_fetch_array ($result);

      // Sessionvariablen erstellen und registrieren
      $_SESSION["user_id"] = $data["nc_id"];
      $_SESSION["user_email"] = $data["email"];
      // $_SESSION["user_nachname"] = $data["Nachname"];
      // $_SESSION["user_vorname"] = $data["Vorname"];
        $_SESSION["login"] = true;
        header("Location: intern.php");
        }
        else
        {
            die('invalid login');
        }
    }
    else
    {
        ?>
        <html>
<head>
  <title>Login</title>
</head>

<body>
 <h2 color="red">Error: Username or Password wrong!</h2>
<form action="login.php" method="post">
  Username: <input type="text" name="user" size="20" /><br />
  Password: <input type="password" name="pass" size="20" /><br />
  <input type="hidden" name="action" value="login" />
  <input type="submit" value="Login" />
</form>
</body>
</html>
<?

    }
}
else
{
    ?>
    <html>
<head>
  <title>Login</title>
</head>

<body>

<form action="login.php" method="post">
  Username: <input type="text" name="user" size="20" /><br />
  Password: <input type="password" name="pass" size="20" /><br />
  <input type="hidden" name="action" value="login" />
  <input type="submit" value="Login" />
</form>
</body>
</html>
<?
}
?>