loginform accepterer blank formular
Hej!Jeg har denne loginform som inkluderes på alle beskyttede sider. Problemet er bare, at den accepterer hvis man indsender en blank formular. Hvordan undgår man at den accepterer det?
Mads
<?php
header("Content-type: text/html; charset=iso-8859-1");
session_start(); //starting session
require_once('config.php');
$db_url = "url"; //db url
$db_user = "user"; //db user
$db_pass = "pass"; //db password
$db_name = "db"; //db name
$table_prefix = "edito_"; //table prefix
//connect to db and choose table
$conn = mysql_connect("$db_url", "$db_user", "$db_pass") or die(mysql_error());
mysql_select_db("$db_name") or die(mysql_error());
//get rows from db
$query = mysql_query("SELECT username, password FROM {$table_prefix}users WHERE username='".$_REQUEST["username"]."'");
$row = mysql_fetch_array($query);
//if no session registered
if (!isset($_SESSION["password"]) or !isset($_SESSION["username"])){
//if
if (isset($_REQUEST["username"]) && isset($_REQUEST["password"]) && $row["username"] == $_REQUEST["username"] && $row["password"] == $_REQUEST["password"]) {
//save as sessions
$_SESSION["password"] = $_REQUEST["password"];
$_SESSION["username"] = $_REQUEST["username"];
}
elseif (!isset($_REQUEST["password"]) or !isset($_REQUEST["username"])){
//loginform
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xml:lang="da">
<head>
<title>Editorial Login</title>
<link rel="stylesheet" type="text/css" href="editorial.css" />
</head>
<body>
<div id="loginframe">
<div style="position:relative;background-color:#336699;padding:5px;">
<div style="position:relative;padding:5px;float:left;"><img src="images/editorial_logo.jpg" alt="" /></div>
<div style="position:relative;padding:5px;float:right;"><img src="images/editorial_text.gif" alt="" /></div>
<div style="clear:both;"></div>
</div>
<div id="loginform">
<form action="" method="post" name="loginform">
Username:<br />
<input type="text" name="username" class="logintext" /><br />
Password:<br />
<input type="password" name="password" class="logintext" /><br />
<input type="submit" value="LOGIN" class="formbutton" />
</form>
</div>
</div>
</body>
</html>
<?php
exit();
}
};
//if sessions registered
//show site
?>
