Here are the code some of them are just a short version of it..Hope it gives you an idea..
Let me know what I did wrong please.. thanks.
login.php file
<?php
require 'includes/application_top.php';
$error_msg = "";
if (!empty($_POST)) {
if(!empty($_POST['username']) && (!empty($_POST['password']))){
$_POST['password'] = md5($_POST['password']);
$query = "SELECT `username`, `admin` FROM `users` WHERE `username` = '".$_POST['username']."' AND `password` = '".
$_POST['password']."'";
$result = mysql_query($query);
$num_rows = mysql_num_rows($result);
if ($num_rows == 1) {
$row = mysql_fetch_array($result);
$_SESSION['username'] = $_POST['username'];
$_SESSION['authuser'] =0;
// Register the session
//$_SESSION['username'] = $row['username'];
if ( isset($_POST['rememberme']) && $_POST['rememberme'] == "on" ) {
setcookie ($cookie_name, 'username=' . $_POST['username'] .'password='.$_POST['password'], time() +
$cookie_time);
}//elseif ($rememberme == "")
// $_SESSION['username'] = $row['username'];
if ( $row['admin'] == 1 ) {
$_SESSION['authuser'] =1;
}
header ("Location: index.php");
} else {
$error_msg = "Invalid username/password combination!";
}
}
else {
$error_msg = "Please enter your username and password to view this page!";
}
}
?>
The HTML FORM
Cut down version of HTML form for login page:
<html>
..
..
<form method="post" action="<?php echo $_SERVER['PHP_SELF'];?>">
<br />
<table width="200" border="0" cellpadding="5">
<tr >
<th>Username</th>
<td><input type="text" name="username" /></td>
</tr>
<tr>
<th>Password</th>
<td><input type="password" name="password" /></td>
</tr>
<tr>
<td colspan="2">
<label> </label><input type="checkbox" name="rememberme" <?php if ( !empty($_POST['rememberme']) ) echo 'checked'; ?> />Remember Me<br />
</td>
</tr>
<tr >
<th colspan="2"><input type="submit" name="Submit" value="Login" />
<input type="reset" name="reset" value="Reset" />
</th>
</tr>
</table>
</form>
..
</html>
application_top.php
<?php
require 'connection.php';
require 'global.php';
$cookie_name = 'siteAuth';
$cookie_time = (3600 * 24 * 30); // 30 days
?>
connection.php
//Here is connection to DB
session_start();
global.php
if (!isset($_SESSION['authuser']) || isset ($_COOKIE['username'])){
header ("location: login.php");
exit();
}