php code for to obtain via login and id, info from db

escolta

u see semthin`wrong with this code?

its supposed to be the code for a login, pasword page,
in order to display some dbase information on a second page called infouser.php

the problem is that the infouser.php diplays nothing at all....

<?php session_start(); ?>
<html>
<head>

</head>

<body>

<form action="login.php" name="login" method="post">
User <input type="text" size="20" name="user">
Password <input type="password" size="20" name="pass">
<input type="submit" name="submit" value="Aceptar">
</form>

<?php
 if ($submit)
 {	
 	$dbcnx = mysql_connect("localhost", "selex", "seguridad911");
	mysql_select_db("selex");

$strSQL = "SELECT user, ID from soluciones where user = '$user' and ID = '$pass' ";
$res = mysql_query($strSQL);
$x = @mysql_num_rows($res);

 if ($rs= @mysql_fetch_array($res))
 {
$_SESSION['user'] = $rs['user'];
$_SESSION['pass'] = $rs['ID'];

echo "<script>
location.href='infouser.php?band='+1+''
</script>
";

 } //end if session y redireccion para desplegar informacion en la otra pagina con bandera para identificar si se llego a esa pagina por medio de esta

elseif ($x=='0')
{
	$error = "Verifica tu Username y Password";
	echo $error;
}//end if error login




 }//end submit
?>

</body>
</html>

devinemke

your code assumes that register_globals in ON in your php.ini file. is it? you should really code as if it is OFF. read more here.
are you calling session_start() in infouser.php?

escolta

is there something wrong i with calling session start?

someonte told me it was better to take this code out

$dbcnx = mysql_connect("localhost", "selex", "seguridad911"); 
mysql_select_db("selex", $dbcnx);

place it on its own file and, call it connection.php and then at the top of each page where i will need to connect to the database, add an include. For example

include("../connection.php");