- <?php
- // Начинаем сессию
- session_start();
- include "config.php";
- $login=$_POST['name'];
- $pswd=$_POST['password'];
- mysql_select_db($dbName) or die(mysql_error());
- $query="SELECT * FROM user WHERE name = '".mysql_real_escape_string($login)."' AND passw = '".mysql_real_escape_string($pswd)."'";
- $result=mysql_query($query);
- $redirect=mysql_num_rows($result)?"privat.php":"kabinet.php";
- header("Location: ".$redirect);
- $_SESSION['name']=htmlspecialchars($_POST['name']);
- $_SESSION['password']=htmlspecialchars($_POST['password']);
- $_SESSION['login']=$login;
- $_SESSION['pswd']=$pswd;
- ?>