INDEX.PHP:
<html>
<head>
<?php
include 'validatesession.php';
?>
<link rel="stylesheet" type="text/css" href="base.css" />
</head>
<body>
VALIDATESESSION.PHP:
<?php
if (!isset($_SESSION['sess_security_id']))
{
//header("location: login.php"); // send to authentication page ..
echo "<script>document.location.href='http://www.mysite.com/login.php'</script>";
}
?>
LOGIN.PHP:
<?php
if(isset($_POST['Submit']) )
{
$conn=mysql_connect(ip,user,pass);
mysql_select_db("dbname");
if (!$conn)
{
echo "Connection Failed";
}
$username = $_POST["username"];
$password = $_POST["password"];
$sql="SELECT security_id FROM usersecurity WHERE username='" . $username . "' AND password= '" . $password . "' ";
$rs=mysql_query($sql);
if (!$rs)
{
exit("Error in SQL");
}
while ($i = mysql_fetch_row($rs))
{
$security_id=mysql_result($rs, 0,"security_id");
session_start();
$_SESSION["sess_security_id"] = $security_id;
//echo "<script>document.location.href='http://www.mysite.com/index.php'</script>";
header("location: index.php");
}
echo "<script>document.location.href='http://www.yahoo.com'</script>"; //for testing
}
?>
<html>
<head>
<link rel="stylesheet" type="text/css" href="base.css" />
</head>
<body>
<div class="bodyClass">
<b>Login:</b>
<br><br>
<form name="form1" method="post" action="<? echo $PHP_SELF;?>">
<p>User Name:
<input type="text" name="username">
</p>
<p>Password:
<input type="password" name="password">
</p>
<p>
<input type="submit" name="Submit" value="Submit">
</p>
</form>
<p>
Click envelope to request username/password:
<a href="mailto:myaddress@domain.net"><img src="http://www.mysite.com/images/envelope.gif" width=16 height=10 border=0></a>
</p>
</div>
</body>
</html>
