PHP Code:
<?
include 'db.php';
session_start();
if (!empty($_SESSION['username'])) {
print "you are already logged in!";
include '../family/displaytree.php';
exit();
}
$familyusername = $_POST['username'];
$password = $_POST['password'];
if((!$familyusername) || (!$password)){
echo "Please enter ALL of the information! <br />";
include '../login/login_form.html';
exit();
}
// Convert password to md5 hash
$password = md5($password);
// check if the user info validates the db
$sql = mysql_query("SELECT * FROM users WHERE username='$familyusername' AND password='$password' AND activated='1'");
$login_check = mysql_num_rows($sql);
if($login_check > 0){
while($row = mysql_fetch_array($sql)){
foreach( $row AS $key => $val ){
$$key = stripslashes( $val );
}
// Register some session variables!
session_register('first_name');
$_SESSION['first_name'] = $first_name;
session_register('last_name');
$_SESSION['last_name'] = $last_name;
session_register('username');
$_SESSION['username'] = $familyusername;
session_register('email_address');
$_SESSION['email_address'] = $email_address;
session_register('special_user');
$_SESSION['user_level'] = $user_level;