<!--
This will show the login form,
Put this where you want the login form to be
-->
<form action="process_login.php" method="post"> <!--Take note of where the URL action="" points to-->
Username: <input type="text" name="username" /><br />
Password: <input type="password" name="password" /><br />
<input type="submit" value="Login" />
<!--
The following code will be on the page where the action="" page points
In this case, all this code should be on the page process_login.php
-->
<?php
mysql_connect ('databaseaddress ie localhost', 'username', 'password');
mysql_select_db ('database');
$username = mysql_real_escape_string($_POST['username']);
$password = mysql_real_escape_string($_POST['password']);
$result = mysql_query("SELECT * FROM thetablename WHERE username = '$username' AND password = '$password' "); // YOU WILL NEED TO SWITCH OUT "thetablename" with the name of your table!
if(mysql_num_rows($result))
{
// Login
session_start();
$_SESSION['username'] = htmlspecialchars($username); // htmlspecialchars() sanitises XSS
}
else
{
// Invalid username/password
echo '<p><strong>Error:</strong> Invalid username or password. <a href="login.php">Go back.</a></p>';
//Either use the above code to display it on the same page,
//or you can use the code: header('Location: wrongpassword.php'); to redirect to a page
//If you choose to redirect, replace the echo ''; message with the header(''); code
}
// Redirect
header('Location: announce.php');
//This happens after it processes the page, this is the page you will be re-directed to. If the login fails, it will re-direct you to this page unless
//you re-direct prior to this, (I would have it happen under the Invalid username/password comment
exit;
?>
<!--
There you have it, this code will start a session (login/cookie) with a database who isn't encrypted with the rows Username, and Password
-->