[code]<html> <head> <title>PWN|CLAN - Login</title> <style> body { background-color: Black; color: White; font-family: Tahoma, sans-serif; font-size: 100%; } #userpass { width: 60px; border-color:#777777; background-color: #FFFFFF; color: #000000; } #subm { border-color: #777777; background-color: #FFFFFF; color: #000000; } </style> </head> <body> <?php if (!isset($_POST['submit']) || (isset($_POST['submit']) && $_POST['username'] == '') || (isset($_POST['submit']) && $_POST['password'] == '')) { echo "<form name='zlogin' method='POST' action='" . $_SERVER['PHP_SELF'] . "'>"; echo "Username: <input type='text' name='username' id='userpass'><br>"; echo "Password: <input type='password' name='password' id='userpass'><br>"; echo "<input type='submit' name='submit' value='Login' id='subm'> <input type='reset' name='reset' value='Reset' id='subm'>"; echo "</form>"; }else { mysql_connect("localhost", "root", "chaos") OR die('password'); mysql_select_db("main") OR die('Connecting'); $q = "SELECT * FROM users WHERE userid='". $_POST['username']. "' AND password='".$_POST['password'] . "'"; $rs = mysql_query($q) or die('Problem with query: ' . $q . '<br />' . mysql_error()); $qquery = mysql_fetch_array($rs); if ($qquery['userid'] == $_POST['username'] && $qquery['password'] == $_POST['password']) { session_name('login'); session_start(); $_SESSION['username'] = $_POST['username']; $_SESSION['password'] = $_POST['password']; echo session_id(); $q = ""INSERT * INTO users (sessionid) WHERE userid=".$_POST['username']." VALUES(session_id)"; $rs = mysql_query($q) or die('Problem with query: ' . $q . '<br />' . mysql_error()); echo "Successfully logged in as: ".$_POST['username']."<br><a href='index.php?page=your_account'>Click here to continue...</a>"; }else { echo "Login failed,<br><a href='index.php?page=login'>Click here to try again...</a>"; } } ?> </body> </html>[/code] by the way u kno any good session tutorials?
