<?php
#login.php
if(isset($_POST['login'])){
require_once("connection.php");
$table="v1_login";
$username=addslashes($_POST['username']);
$psw=md5(addslashes($_POST['psw']));
$sql="SELECT idUser, idPrivilegio, username FROM $table WHERE username LIKE '$username' AND psw LIKE '$psw'";
$query=mysqli_query($connect, $sql);
$total=mysqli_num_rows($query);
if($total==1) {
// login
$fetch=mysqli_fetch_assoc($query);
if(!isset($_SESSION)){
session_start();
}
$_SESSION['username']=$username;
$_SESSION['idPrivilegio']=$fetch['idPrivilegio'];
$_SESSION['idUser']=$fetch['idUser'];
$caminho="cPanel.php";
} else {
// sem login
$caminho="?erroLogin";
}
header("Location:$caminho");
}
?>
<!DOCTYPE html>
<html lang="pt">
<head>
<meta charset="UTF-8">
<title>LOGIN</title>
</head>
<body>
<form method="post">
<label>Username:</label><br>
<input type="text" name="username" required>
<br>
<label>Password:</label><br>
<input type="text" name="psw" required>
<br>
<input type="submit" name="login" value="EFECTUAR LOGIN">
<!-- comentário -->
</form>
</body>
</html>
Sem comentários:
Enviar um comentário