<?php
$host="localhost"; // Host name
$username="root"; // Mysql username
$password=""; // Mysql password
$db_name="members"; // Database name
$tbl_name="members"; // Table name
$d=date("D");
// Connect to server and select databse.
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("members")or die("cannot select DB");
// username and password sent from form
$username=$POST['username'];
$password=$POST['password'];
// To protect MySQL injection (more detail about MySQL injection )
$username = stripslashes($username);
$password = stripslashes($password);
$username = mysql_real_escape_string($username);
$password = mysql_real_escape_string($password);
$sql="SELECT * FROM members WHERE username='$username' and
password='$password'and usertype='$usertype'";
$result=mysql_query($sql);
// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $username and $password, table row must be 1 row
if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
session_register("username");
session_register("usertype");
header("location:fs.html");
}
else if(isset($_SESSION['usertype'] == 'member')
{
document.getElementById("cp")=true;
document.getElementById("up")=true;
document.getElementById("pr")=true;
document.getElementById("gp")=true;
}
elseif (isset($_SESSION['usertype'] == 'pl')
{
document.getElementById("cp")=true;
document.getElementById("up")=true;
document.getElementById("pr")=true;
document.getElementById("gp")=true;
}
else
{
echo"<br>";
echo"<a href='new main.php'><center>Back to main page</center></a>";
}
?>
