ok, here's my login page code:
if ($submit) {
$db = mysql_connect("localhost", "user", "pass");
mysql_select_db("mydb",$db);
$query = "SELECT * FROM members WHERE alias = '$alias' AND pass = '$pass'";
$result = mysql_query($query) or die("Error in Query: $l_query. mySQL said " . mysql_error() . '.');
if (mysql_num_rows($result) == 1)
{
session_start();
$ses_user = $username;
$ses_pass = $password;
session_register('ses_user');
session_register('ses_pass');
header("Location: index.php?page=members");
}
else
{
$title = 'Login Failed';
$location = 'login failed';
include('header.php');
echo "<center>Invalid Alias/Password. Press Back to try again</center>\n";
include('footer.php');
}
} else {
include('header.php');
?>
<center>
<table border="0" cellspacing="5" cellpadding="5">
<form method="post" action="login.php">
<tr>
<td>Alias</td>
<td><input type="text" size="10" name="alias"></td>
</tr>
<tr>
<td>Password</td>
<td><input type="password" size="10" name="pass"></td>
</tr>
<tr>
<td colspan="2" align="center">
<input type="submit" name="submit" value="Log In">
</td> </tr> </form> </table> </center>
<?
include('footer.php');
}