comp353/index.php at master · mariegobran/comp353 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
<?php session_start(); ?>

   <?php include("config.php");
   include("redirect.php");
   include("promotionValidation.php");


   if($_SERVER["REQUEST_METHOD"] == "POST") {

    // username and password sent from form
      if($_POST['username']!=null && ($_POST['password'])!=null ){
        $myusername = mysqli_real_escape_string($conn,$_POST['username']);
        $mypassword = mysqli_real_escape_string($conn,$_POST['password']);

        $sql = "SELECT * FROM users WHERE username = '$myusername' and password = '$mypassword'";
        $result = mysqli_query($conn,$sql);
        $row = mysqli_fetch_array($result,MYSQLI_ASSOC);


        // $active = $row['active'];

        $count = mysqli_num_rows($result);

        // If result matched $myusername and $mypassword, table row must be 1

        if($count == 1) {
        // session_register("username");
          $_SESSION['login_user'] = $myusername;
          $_SESSION['usetype'] = $row['usertype'];
          $_SESSION['userID'] = $row['userID'];
          $_SESSION['card'] = $row['card'];

          if ($_SESSION['usetype']=="Admin" || $_SESSION['usetype']=="Regular"){
            redirect("viewAds.php");
          }else redirect("assumptions.txt");

        }else echo "please enter your username & password";

      }else {
       $error = "Your Login Name or Password is invalid";
    }
 }
?>
<html>

   <head>
   <link rel="stylesheet" href="styles.css">

    <title>Login Page</title>

   </head>

   <body bgcolor = "#FFFFFF">
    	<?php include("menu.php"); ?>
      <div align = "center">
         <div style = "width:300px; border: solid 1px #333333; " align = "left">
            <div style = "background-color:#333333; color:#FFFFFF; padding:3px;"><b>Login</b></div>
            <div style = "margin:30px">
               <form action = "" method = "post">
                  <label>UserName  :</label><input type = "text" name = "username" class = "box"/><br /><br />
                  <label>Password  :</label><input type = "password" name = "password" class = "box" /><br/><br />
                  <input type = "submit" value = " Submit "/><br />
               </form>


            </div>

         </div>

      </div>

   </body>
</html>