<?php
session_start();
include 'include/config.php';
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- The above 3 meta tags *must* come first in the head; any other head content must come *after* these tags -->
<title>WebMall</title>
<!-- Bootstrap -->
<link href="css/bootstrap.min.css" rel="stylesheet">
<!-- Custom styles for this template -->
<link href="css/signin.css" rel="stylesheet">
<!-- jQuery (necessary for Bootstrap's JavaScript plugins) -->
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js"></script>
<!-- Include all compiled plugins (below), or include individual files as needed -->
<script src="js/bootstrap.min.js"></script>
</head>
<body>
<center>
<H1>Welcome To The WebMall</H1><br><br>
<? if(!$Loggedin) {?>
<H2>Please Login</H2>
<form class="form-signin" method="post" action="">
<input type="text" class="form-control" name="username" placeholder="Username" required><br><p>
<input type="password" class="form-control" name="password" placeholder="Password" required><br><br>
<button class="btn btn-lg btn-primary btn-block" name="login" type="submit">Sign in</button>
</form><br>
<? } else {include 'include\items.php';} ?>
</body>
<?php
if(isset($_POST['login']))
{
$username = $sql->secure($_POST['username']);
$password = $sql->secure($_POST['password']);
$query = $sql->query("select * from $accDB..TB_User where StrUserID='$username' and password='".md5($password)."'");
if($query->execute())
{
$rows = $query->fetchAll();
$rowCount = count($rows);
if($rowCount>0)
{
$_SESSION['username'] = $username;
$_SESSION['password'] = $password;
header('location: index.php');
}
else
{
echo "<label class=bg-danger>Wrong User/Password</label>";
}
}
}
if(!empty($_SESSION['username']))
{
$act = !empty($_GET['act']) ? $_GET['act'] : '';
$act = $sql->secure($act);
if($act == "logout" && !empty($_SESSION['username']))
{
session_destroy();
header('location:index.php');
}
if($act == "admin" && $_SESSION['username'] == $adminuser)
{
include 'include/admin.php';
}
}
?>
<div id="footerContainer">
<div id="content"></div>
<div id="footer"><label class=bg-warning>© <a href='https://www.***********.com/forum/members/6567633-hazemooking.html'>This Guy</a></label></div>
</div>
Originally Posted by elmagico123
Reply With Quote