<form action="#" method="post" accept-charset="utf-8">
<table>
<tr>
<td>Username:</td><td><input type="text" name="username"></td>
</tr>
<tr>
<td>Password:</td><td><input type="password" name="password"></td>
</tr>
</table>
<input type="submit" name='submit' value="LogMe"></p>
</form>
<?php
session_start();
$submit=$_POST['submit'];
$username=$_POST['username'];
$password=$_POST['password'];
require "connect.php";
$query=mysql_query("SELECT * FROM users");
if (isset($submit))
{
if (isset($submit) AND isset($password))
{
while ($row=mysql_fetch_assoc($query))
{
$dbusername=$row['username'];
$dbpassword=$row['password'];
}
if (md5($password)==$dbpassword AND $username==$dbusername)
{
$_SESSION['username']=$username;
$query=mysql_query("SELECT * FROM users WHERE username='$username'") or die(mysql_error());
$row=mysql_fetch_array($query);
extract($row);
$_SESSION['auth']=$role;
switch ($_SESSION['auth']) {
case 1:
$type="user";
$admin=0;
$moderator=0;
break;
case 2:
$type="moderator";
$admin=0;
$moderator=1;
break;
case 3:
$type="administrator";
$admin=1;
$moderator=1;
break;
}
if(headers_sent()) {
echo "<meta http-equiv='refresh' content=2 url='index.php?id=1'>";
} else {
header('location: index.php?id=1');
}
}
else
{
echo "Nespravne heslo";
exit();
}
}
else
{
echo "Zadajte meno aj heslo";
}
}
?>
