<?php include("config.php"); $connect = mysql_connect("$dbhost", "$dbusername", "$dbpass"); mysql_select_db("$dbname", $connect); session_start(); if(!isset($ID)) { echo "<form method=\"POST\" action=$PHP_SELF> <center> <table> <tr> <td>Username:</td> <td><input type=\"text\" name=\"ID\" size=\"20\"></td> </tr> <tr> <td>Password:</td> <td><input type=\"password\" name=\"password\" size=\"20\"></td> </tr> <tr> <td colspan=\"2\"> <p align=\"center\"><input type=\"submit\" value=\"Submit\" name=\"submit\"></td> </tr> </table> </center> </form>"; exit; } session_register("ID"); session_register("password"); $sql = "SELECT * FROM users WHERE ID = \"$ID\" AND password = \"$password\""; $result = @mysql_query($sql) or die("No."); if(mysql_num_rows($result) == "0") { session_unregister("ID"); session_unregister("password"); echo "<h2 align=center>Wrong username and password, try again</h2>"; exit; } $ID = mysql_result($result,0,"name"); mysql_close($connect); ?>