OK... God pointe :)
Men min tanke var også at give lidt flere oplysninger efter første mulighed var afprøvet :)
Her er selve koden:
<?php
header("Content-type: text/html; charset=iso-8859-1");
session_start(); //starting session
require_once('../config.php');
//connect to the databse
$conn = mysql_connect("$db_host", "$db_user", "$db_pass") or die(mysql_error());
mysql_select_db("$db_name") or die(mysql_error());
//make query-string to database
$query = mysql_query("SELECT id, user, email, password, status, realname FROM {$table_prefix}users WHERE user='".$_REQUEST["user"]."'");
//fetch content of database
$row = mysql_fetch_array($query);
//check if no sessions are registered for password or username
if (!isset($_SESSION["password"]) or !isset($_SESSION["user"])){
//check if no sessions and db and request are identical and request is not NULL
if (isset($_REQUEST["user"]) && isset($_REQUEST["password"]) && $row["user"] == $_REQUEST["user"] && $row["password"] == $_REQUEST["password"] && $_REQUEST["password"] != NULL && $_REQUEST["user"] != NULL){
//save requests as sessions
$_SESSION["id"] = $row["id"];
$_SESSION["password"] = $_REQUEST["password"];
$_SESSION["user"] = $_REQUEST["user"];
$_SESSION["status"] = $row["status"];
$_SESSION["realname"] = $row["realname"];
$_SESSION["email"] = $row["email"];
}
else {
//show loginform and exit
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xml:lang="da">
<head>
<title>Asign CMS Login</title>
<link rel="stylesheet" type="text/css" href="styles/login.css" />
</head>
<body onload="document.loginform.user.focus();">
<div class="LoginTop">
<div class="LoginTopCenter"><img src="images/asign_logo.gif" alt="" /></div>
</div>
<div class="LoginBox">
<div class="LoginForm">
Asign CMS login<br />
<form action="" method="post" name="loginform">
User:<br />
<input type="text" name="user" class="Input150" /><br />
Password:<br />
<input type="password" name="password" class="Input150" /><br />
<input type="submit" value="Enter" class="InputButton" /><br />
Forgot password? (Send by email)
</form>
</div>
</div>
</body>
</html>
<?php
exit();
};
};
?>