niurexx
Active Member
- Messages
- 1,053
- Joined
- Nov 10, 2009
- Messages
- 1,053
- Reaction score
- 25
- Points
- 40
<?php
require_once 'database.php';
session_start();
function signIn()
{
$password = md5(trim($_POST['password']));
$sql = 'SELECT username, user_type FROM users WHERE username = "'.addslashes($_POST['username']).'" ';
$sql .= 'AND password = "'.$password.'";';
dbConnect();
$result = runQuery($sql);
if (mysql_num_rows($result) != 0)
{
$data = mysql_fetch_assoc($result);
$_SESSION['username'] = stripslashes($data['username']);
$_SESSION['user_type'] = $data['user_type'];
if ($_SESSION['user_type'] == 'student')
{
header('Location: studentpage.php');
}
else if ($_SESSION['user_type'] == 'staff')
{
header('Location: adminpage.php');
}
}
else {
header('Location: login.php?status=SIGN-IN-FAILED');
}
}
function signOut()
{
session_destroy();
header('Location: index2.php');
}
function isSessionValid()
{
if (!isset($_SESSION['user_id']) || empty($_SESSION['user_id'])) {
signOut();
}
return true;
}
if(isset($_POST)){
signIn();
}
if (isset($_GET) && $_GET['logout'] == 'true') {
signOut();
}
?>
problem solved... password xencrypt masa check user time proses login..