Login code

scumgrief

<head>
<title>Pintu Masuk Guru</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<?
session_start();
session_register('userid');
session_register('pass_word');
?>
<center>
<p>Selamat Datang!!!</p>
<p>Laluan Guru<br>
</p>
<form method="post" action="127.0.0.1/teachercheck.php">
//userid form
<p><b>ID Pengguna</b><br>
<input type="text" name="userid" size="20" maxlength="20">
</p>
//password form
<p><b>Kata Laluan</b><br>
<input type="password" name="pass_word" size="20" maxlength="8"><br>
<input type="submit" name="Submit" value="Masuk!">
</p>
</form></center>
</body>

Is this login code acceptable?
What if the users doesn't allow cookies.
what should i do?

saltwater

where do you check the login and password?

scumgrief

teachercheck.php i am using mysql to store userid and password

scumgrief

This is the code for teachercheck.php

<head>
<base target ="_top">
<title>Login Guru</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<?
session_start();
$hostname = "127.0.0.1";
$password ="";
$user = "";
$db="school";
/ Establish our connection to the DB. /
mysql_pconnect($hostname,$user,$password) or die("Unable to connect to SQL
server");
mysql_select_db($db) or die("Unable to select database");?>
<?$result = mysql_query("select from details where teacherid like '$userid'");
if (mysql_num_rows($result) != 0){
$pass = mysql_db_query("select from details where userid like '$userid' and password like '$pass_word'");
$numpass = mysql_num_rows($pass);
if ($numpass != 0){header("Location:127.0.0.1/tindex.php?teacherid=".$userid);
exit;
}
else
echo("Kata Laluan anda salah. Sila cuba sekali lagi.");
}
if (mysql_num_rows($result) == 0){echo("Anda masih belum didaftarkan");}
?>
</body>