note: that this error made the user can access to all pages without login and the cookie doesn't exist even 'i try echo cookie user'
here is the code of login form
if (isset($_POST['submit']))
{
require_once("/dns/com/olympe-network/webmastring/includes/connect.inc.php");
mysql_select_db("84452_testweb");
if (!empty($_POST['user']) || !empty($_POST['pass']))
{
$_POST['user'] = mysql_real_escape_string($_POST['user']);
$_POST['pass'] = mysql_real_escape_string($_POST['pass']);
$select = "SELECT * FROM user WHERE username = '".$_POST['user']."' ";
$requet = mysql_query($select);
$exist = mysql_num_rows($requet);
$array = mysql_fetch_array($requet);
if ($exist>0 && $_POST['pass']=$array['password'])
{
$hour = time()+(60*60);
setcookie("user" , $array['username'] ,$hour);
setcookie("pass" , $array['password'] , $hour);
header("location:".$path."'admin.php");
}
else
{
$erreur="Les information entrer ne son pas valide ";
}
}
else
{
$erreur="Veuillez taper votre username et votre mot de pass";
}
}