if (empty($ip) || $ip=='unknown') { $ip=getenv("REMOTE_ADDR"); }

mysql_query ("DELETE FROM Errors WHERE UNIX_TIMESTAMP() - UNIX_TIMESTAMP(date) > 900");

$result = mysql_query("SELECT col FROM Errors WHERE ip='$ip'",$db);

$myrow = mysql_fetch_array($result);

if ($myrow['col'] > 2) {

$password = md5($password);

$result = mysql_query("SELECT * FROM users WHERE login='$login' AND password='$password'",$db);

$myrow = mysql_fetch_array($result);

if (empty($myrow['id']))

{$select = mysql_query ("SELECT ip FROM Errors WHERE ip='$ip'");

$tmp = mysql_fetch_row ($select);

if ($ip == $tmp[0]) {

$result52 = mysql_query("SELECT col FROM Errors WHERE ip='$ip'",$db);

$myrow52 = mysql_fetch_array($result52);

$col = $myrow52[0] + 1;

mysql_query ("UPDATE Errors SET col=$col,date=NOW() WHERE ip='$ip'");

else {

mysql_query ("INSERT INTO Errors (ip,date,col) VALUES ('$ip',NOW(),'1')");

}exit ("Извините, введённый вами логин или пароль неверный.");

}else {

       $_SESSION['id']=$myrow['id'];

<?PHP session_start();

 include_once $_SERVER['DOCUMENT_ROOT'].'/db/config.php' ;

        dbConnect() ;

if($_SESSION['id'] && !isset($_COOKIE['tzRemember']) && !$_SESSION['rememberMe']) {

        $_SESSION = array();

        unset($_SESSION['password']);

        unset($_SESSION['login']);

        unset($_SESSION['id']);

        session_destroy();

}if(isset($_GET['logoff'])) {

        $_SESSION = array();

        unset($_SESSION['password']);

        unset($_SESSION['login']);

        unset($_SESSION['id']);

        session_destroy();

}if($_POST['submit']=='Enter') {

        $err = array();

        if (isset($_POST['login'])) { $login = $_POST['login'];

        if ($login == '') { unset($login);} }

        if (isset($_POST['password'])) { $password=$_POST['password'];

        if ($password =='') { unset($password);} }

        if (empty($login) or empty($password))  {

                $err[]='You did not enter all the information you fill in all fields';

        }if (empty($err))

        {       $login = stripslashes($login);

                $login = htmlspecialchars($login);

                $password = stripslashes($password);

                $password = htmlspecialchars($password);

                $login = trim($login);

                $password = trim($password);

                $password = md5($password);

                $result1 = mysql_query("SELECT * FROM users WHERE login='".$login."' AND password='".$password."'");

                $myrow = mysql_fetch_array($result1);

                if (empty($myrow['id'])) {

                        $err[]='Sorry, you entered your username or password is incorrect.';

                } else {

                        $_SESSION['login']=$myrow['login'];

                        $_SESSION['password']=$myrow['password'];

                        $_SESSION['id']=$myrow['id'];

 if($result)

 {         $o=array();

       $o[]="<table bgcolor=gray border=0 width=100%><tr><td>Unique Identifier</td><td>Position</td><td>Limit</td></tr>";

       while($myrow = mysql_fetch_array($result))

       {     $o[]="<tr bgcolor=white>";

             $o[]="<td>{$myrow['date']}</td>";

             $o[]="<td>{$myrow['name']}</td>";

             $o[]="<td>{$myrow['content']}</td>";

                         $o[]="</tr>";}

                         $o[]="</table>";}

<?PHP require_once 'includes/global.inc.php';?>

$position_name = "";

$position_balance = "";

if(isset($_POST['submit-form'])) {

        $position_name = $_POST['position_name'];

        $position_balance = $_POST['position_balance'];

        $success = true;

        $Positions = new Positions();

        if($success)

        {   $data['position_name'] = $position_name;

            $data['position_balance'] = $position_balance;

            $newPositions = new Positions($data);

            $newPositions->save(true);

                header('Location: positions.php);

            $o[]="<td>{$myrow['position']}</td>";

            $o[]="<td>{$myrow['position_name']}</td>";

            $o[]="<td>{$myrow['position_balance']}</td>";

 <html>

 <body><center>

 <table border=1 width=100%>

 <tr><td><?echo implode('',$o);?></td>

 <td><form name="posts" action="positions.php" method="post"><h3>Добавить позицию</h3>

 <label for="position_name">Position</label><br>

 <input type="text" value="<?PHP echo $position_name; ?>" name="position_name" AUTOCOMPLETE=OFF /><br>

 <label for="position_balance">Limit</label><br>

 <input type="text" value="<?PHP echo $position_balance ?>" name="position_balance" AUTOCOMPLETE=OFF />

 <button type="submit" value="Register" name="submit-form">Зарегистрировать</button>

 </form></td></tr></table>

 </html>