Hi,
I my first problem is hashing passwords to md5.
My second problem is defining session on value from db.
There is my code but not working.
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");
$username=$_POST['username'];
$password=$_POST['password'];
$hash = md5($password);
$username = stripslashes($username);
$password = stripslashes($password);
$username = mysql_real_escape_string($username);
$password = mysql_real_escape_string($password);
$sql="SELECT * FROM $tbl_name WHERE where username = '$username' and password = '$hash'";
$result=mysql_query($sql);
$count=mysql_num_rows($result);
if($count==1){
$sql2="SELECT access FROM $tbl_name WHERE username='$username' and password='$password'";
$access=mysql_query("$sql2");
session_register("username");
session_register("password");
session_register("access");
$_SESSION["access"]=$access;
header("location:success.php");
}
else {
echo "Invalid Username or Password";
Thanks for any answers.