<?php
if ($submit) {
$db = mysql_connect("localhost", "username", "password");
mysql_select_db("alt-muligt", $db);
$sql = "
SELECT auth_level
FROM auth
WHERE username = '$username'
AND password = '$password'
";
$result = mysql_query($sql);
while ($row = mysql_fetch_array($result)) {
$auth_level = $row["auth_level"];
}
if (!mysql_num_rows($result)) {
echo "You are not Authorized for access.";
} else {
setcookie('username', $_POST['username'], (time()+2592000), '/', '', 0);
setcookie('auth_level', $_POST['auth_level'], (time()+2592000), '/', '', 0);
}
if ($auth_level == "1") {
echo "You are logged in as a Guest.<br />
<a href='next.php'>Click here for options</a>
";
} elseif ($auth_level == "2") {
echo "You have Member level access.<br />
<a href='next.php'>Click here for options</a>
";
} elseif ($auth_level == "3") {
echo "You have Editor level access.<br />
<a href='next.php'>Click here for options</a>
";
} elseif ($auth_level == "4") {
echo "You have full Administrative access.<br />
<a href='next.php'>Click here for options</a>
";
}
} else {
?>
<form method="POST" action="<?php echo $GLOBALS ['PHP_SELF'];?>">
Name:<input type="text" name="username"><br />
Password: <input type="password" name="password"><br />
<input type="submit" name="submit" value="Login">
</form>
<?php
