Вот скрипт авторизации:
| Код | <?php
error_reporting(E_ALL);
if(isset($_POST['auth_submit'])) {
$db = mysql_connect("localhost", "wmggfg_666","666");
mysql_select_db("wmggfg_666");
$login = $_POST['login'];
$pass = $_POST['pass'];
$query = "SELECT id, login, pass
FROM admin
WHERE login ='{$login}' AND pass='{$pass}'
LIMIT 1";
$sql = mysql_query($query) or die(mysql_error());
}
?>
<?php
session_start();
$_SESSION['user'] = $login;
mysql_close($db);
if (isset($_SERVER['HTTP_REFERER'])) {
header ("location: ".$_SERVER['HTTP_REFERER']);
header ("location: index.php");
}
?>
<html>
<head>
<title>Авторизация</title>
</head>
</html>
|
А этот после:
| Код | <?
session_start();
if (isset($_SESSION['user'])) {
$auth = "Привет ".$_SESSION['user']."!\n";
$auth .= "<a href='logout.php'>Выйти</a>";
$db = mysql_connect("localhost", "wmggfg_666","666");
mysql_select_db("wmggfg_666");
$result = mysql_query("SELECT * FROM teh",$db);
if ($myrow = mysql_fetch_array($result))
{
echo "<table border=0 width=90% align=center>\n";
echo "<tr><td><i>Имя:</i></td><td><i>Фамилия:</i></td><td><i>E-mail:</i></td><td><i>Сообщение:</i></td></tr>\n";
do
{
printf("<tr><td>%s</td><td>%s</td><td>%s</td><td>%s</td></tr>\n", $myrow["imia"], $myrow["famil"], $myrow["mail"], $myrow["soob"]);
}
while ($myrow = mysql_fetch_array($result));
echo "</table>\n";
}
else
{
echo "Данных нет!";
}
$docum = "Эта информация только для зарегистрированных";
}else {
$auth = <<< AUTH
<form method="post" action="avt.php">
<table align="center">
<tr>
<td>Логин</td>
<td><input type="text" name="login"></td>
</tr>
<tr>
<td>Пароль</td>
<td><input type="password" name="pass"></td>
</tr>
<tr>
<td><input type="submit" name="auth_submit" value="Войти"></td>
</tr>
</table>
</form>
AUTH;
}
?>
<html>
<head>
<title>Администраторская</title>
</head>
<body>
<? echo $auth; ?>
</body>
</html>
|
|
