<?php
require_once*'database.php';
session_start();
function*signIn()
{
$sql*=*'SELECT*username,*user_type*FROM*users*WHERE*username*=*"'.addslashes($_POST['username']).'"*';
$sql*.=*'AND*password*=*"'.addslashes($_POST['password']).'";';
dbConnect();
$result*=*runQuery($sql);
if*(mysql_num_rows($result)*!=*0)
{
$data*=*mysql_fetch_assoc($result);
$_SESSION['username']*=*stripslashes($data['username']);
$_SESSION['user_type']*=*$data['user_type'];
echo $data['user_type']; die;
if*($_SESSION['user_type']*==*'student')
{
header('Location:*studentpage.php');
}
else*if*($_SESSION['user_type']*==*'staff')
{
header('Location:*adminpage.php');
}
}
else*{
header('Location:*login.php?status=SIGN-IN-FAILED');
}
}
function*signOut()
{
session_destroy();
header('Location:*index2.php');
}
function*isSessionValid()
{
if*(!isset($_SESSION['user_id'])*||*empty($_SESSION['user_id']))*{
signOut();
}
return*true;
}
if(isset($_POST)){
signIn();
}
if*(isset($_GET)*&&*$_GET['logout']*==*'true')*{
signOut();
}
?>