Cookie / Header Help

[Money88]

<?php
// Connects to your Database
mysql_connect("localhost", "user", "pass") or die(mysql_error());
mysql_select_db("god_login") or die(mysql_error());

//checks cookies to make sure they are logged in
if(isset($_COOKIE['ID_my_site']))
{
$username = $_COOKIE['ID_my_site'];
$pass = $_COOKIE['Key_my_site'];
$check = mysql_query("SELECT * FROM users WHERE username = '$username'")or die(mysql_error());
    while($info != mysql_fetch_array( $check ))
    {

//if the cookie has the wrong password, they are taken to the login page
    if ($pass != $info['password'])
    { header("Location: login.php");
    }

    //otherwise they are shown the admin area
    else
    {
    echo "<b>Username:</b> <? $username ?>";

    echo "<a href=logout.php>Logout</a>";
    }
}

//if the cookie does not exist, they are taken to the login screen
{
header("Location: login.php");
}
}


?>

MOD EDIT: [noparse]

[/noparse] BBcode tags added, MySQL login credentials removed.

[sneakyimp]

Your code is really hard to understand without proper indenting. Take a stab at indenting it and we'll be better able to figure it out.

[Money88]

here posted in a txt

<?php 
// Connects to your Database 
mysql_connect("localhost", "god_money88", "12001200") or die(mysql_error()); 
mysql_select_db("god_login") or die(mysql_error()); 

//checks cookies to make sure they are logged in 
if(isset($_COOKIE['ID_my_site'])) 
{ 
$username = $_COOKIE['ID_my_site']; 
$pass = $_COOKIE['Key_my_site']; 
$check = mysql_query("SELECT * FROM users WHERE username = '$username'")or die(mysql_error()); 
	while($info != mysql_fetch_array( $check )) 
	{ 

//if the cookie has the wrong password, they are taken to the login page 
	if ($pass != $info['password']) 
	{ header("Location: login.php"); 
	} 

	//otherwise they are shown the admin area 
	else
	{ 
	echo "<b>Username:</b> <? $username ?>";

	echo "<a href=logout.php>Logout</a>"; 
	} 
}

//if the cookie does not exist, they are taken to the login screen 
{ 
header("Location: login.php"); 
}
}


?> 

[Money88]

I have tweaked it to this and have it working but With this is doesnt check the pass on the cookie.

<?php 
// Connects to your Database 
mysql_connect("localhost", "user", "pass") or die(mysql_error()); 
mysql_select_db("god_login") or die(mysql_error()); 

//checks cookies to make sure they are logged in 
if(!isset($_COOKIE['ID_my_site'])) 
{ 
header("Location: login.php");
}
else
{
$username = $_COOKIE['ID_my_site']; 
$pass = $_COOKIE['Key_my_site']; 
$check = mysql_query("SELECT username, name, email, country, age, more FROM members WHERE username = '$username'")or die(mysql_error()); 

//otherwise they are shown the admin area 
while(list($username1,$name,$email,$country,$age,$more)= mysql_fetch_row($check))
{
    echo "<b>Name:</b> $name <br>" .
         "<b>Email:</b> $email <br>" . 
         "<b>Country:</b> $coutnry<br>" .
         "<b>Age:</b> $age <br>" .
         "<b>About you:</b> $more<br>";
} 

print "<br><a href=logout.php>Logout</a>"; 
}


?>  

And I am having issues with my login script. It works but will not redirect and change the cookie. (http://www.mwgclan.com/league/login.php user: test password: testing)

Here is the login code:

<?php 
// Connects to your Database 
mysql_connect("localhost", "user", "pass") or die(mysql_error()); 
mysql_select_db("god_login") or die(mysql_error()); 

//Checks if there is a login cookie
if(isset($_COOKIE['ID_my_site']))

//if there is, it logs you in and directes you to the members page
{ 
$username = $_COOKIE['ID_my_site']; 
$pass = $_COOKIE['Key_my_site'];
$check = mysql_query("SELECT * FROM users WHERE username = '$username'")or die(mysql_error());
	while($info = mysql_fetch_array( $check )) 
	{
		if ($pass != $info['password']) 
		{
		}
		else
		{
		header("Location: members.php");
		}
	}
}

//if the login form is submitted
if (isset($_POST['submit'])) { // if form has been submitted

// makes sure they filled it in
	if(!$_POST['username'] | !$_POST['pass']) {
	die('You did not fill in a required field.');
	}
// checks it against the database

	if (!get_magic_quotes_gpc()) {
	$_POST['email'] = addslashes($_POST['email']);
	}
	$check = mysql_query("SELECT * FROM users WHERE username = '".$_POST['username']."'")or die(mysql_error());

	//Gives error if user dosen't exist
	$check2 = mysql_num_rows($check);
		if ($check2 == 0) {
		die('That user does not exist in our database. 

		<a href=register.php>Click Here to Register</a>');
		}
			while($info = mysql_fetch_array( $check )) 
			{
			$_POST['pass'] = stripslashes($_POST['pass']);
			$info['password'] = stripslashes($info['password']);
			$_POST['pass'] = md5($_POST['pass']);

				//gives error if the password is wrong
				if ($_POST['pass'] != $info['password']) {
				die('Incorrect password, please try again.');
				}
				else 
				{ 
				// if login is ok then we add a cookie 
				$_POST['username'] = stripslashes($_POST['username']); 
				$hour = time() + 3600; 
				setcookie(ID_my_site, $_POST['username'], $hour); 
				setcookie(Key_my_site, $_POST['pass'], $hour); 

				//then redirect them to the members area 
				header("Location: members.php"); 
				} 
			} 
} 
else 
{ 

// if they are not logged in 
?> 
<form action="<?php echo $_SERVER['PHP_SELF']?>" method="post"> 
<table border="0"> 
<tr><td colspan=2><h1>Login</h1></td></tr> 
<tr><td>Username:</td><td> 
<input type="text" name="username" maxlength="40"> 
</td></tr> 
<tr><td>Password:</td><td> 
<input type="password" name="pass" maxlength="50"> 
</td></tr> 
<tr><td colspan="2" align="right"> 
<input type="submit" name="submit" value="Login"> 
</td></tr> 
</table> 
</form> 
<a href="http://www.mwgclan.com/league/register.php">Click Here to Register</a>
<?php 
} 

?> 

MOD EDIT: MySQL login credentials removed.