Help
<?php
session_start();
if (isset($_POST['submit'])) {
require_once "includes/conn.inc.php";
$email = $_POST['username'];
$pass = $_POST['password'];
$sql = "SELECT * FROM cms_users WHERE email='".$email."' AND password='".$pass."' AND email_activated='1'";
$results = mysql_query($sql,$conn);
$login_check = mysql_num_rows($results);
if($login_check == 1){
$row = mysql_fetch_array($results);
$id = $row["id"];
$pass = $row['password'];
$firstname = $row["firstname"];
$email = $row["email"];
$_SESSION['id'] = $id;
$_SESSION['firstname'] = $firstname;
$_SESSION['email'] = $email;
$_SESSION['user_logged'] = $email;
$_SESSION['user_password'] = $pass;
mysql_query("UPDATE cms_users SET last_log_date=now() WHERE id='".$id."'",$conn);
header ("Refresh: 5; URL=" . $_POST['redirect'] . "");
echo "You are being redirected to your original page request!<br>";
echo "(If your browser doesn't support this, <a href=\"" . $_POST['redirect']. "\">click here</a>)";
} else {
?>
<html>
<head>
<title>Beginning PHP5, Apache and MySQL</title>
</head>
<body>
<p>
Invalid Username and/or Password<br>
Not registered?
<a href="register.php">Click here</a> to register.<br>
<form action="login.php" method="post">
<input type="hidden" name="redirect" value="<?php echo $_POST['redirect']; ?>">
Username: <input type="text" name="username"><br>
Password: <input type="password" name="password"><br><br>
<input type="submit" name="submit" value="Login">
</form>
</p>
</body>
</html>
<?php
}
} else {
if (isset($_GET['redirect'])) {
$redirect = $_GET['redirect'];
} else {
$redirect = "index.php";
}
?>
<html>
<head>
<title>Beginning PHP5, Apache and MySQL</title>
</head>
<body>
<p>
Login below by supplying your username/password...<br>
Or <a href="register.php">click here</a> to register.<br><br>
<form action="login.php" method="post">
<input type="hidden" name="redirect" value="<?php echo $redirect; ?>">
Username: <input type="text" name="username"><br>
Password: <input type="password" name="password"><br><br>
<input type="submit" name="submit" value="Login">
</form>
</p>
</body>
</html>
<?php
}
?>
Any Ideas would Help
