//check.php
function user_login($user_name,$password)
{
global $feedback;
if (!$user_name || !$password) {
$feedback .= ' ERROR - Missing user name or password ';
return false;
} else {
$user_name=strtolower($user_name);
$password=strtolower($password);
$sql="SELECT * FROM user WHERE user_name='$user_name' AND password='". md5($password) ."'";
$result=mysql_query($sql);
if (mysql_num_rows($result) < 0){
$feedback .= ' ERROR - User not found or password incorrect ';
return false;
} else {
if (mysql_result($result,0,'is_confirmed') == '1') {
user_set_tokens($user_name);
$feedback .= ' SUCCESS - You Are Now Logged In ';
return true;
} else {
$feedback .= ' ERROR - You haven\'t Confirmed Your Account Yet ';
return false;
}
}
}
}
//pass.php
<script language = "php">
include( "check.php" );
if ( user_login( $user_name, $password) )
{
echo "".$feedback."";
}
else
{
echo "".$feedback."";
}
</script>
//show the message above