real_escape_string($_POST['username']);
$query = "SELECT * FROM $table WHERE ".
"username LIKE '".$username."' ".
"LIMIT 1;";
$getid = $db->query($query) or die("Query failed: ".$db->error());
$row = $getid->fetch_assoc();
if (isset($row))
$stored_password = $row['password'];
else $denied = TRUE;
$getid->close();
open_db('close');
$compare_password = $_POST['password'];
if (crypt($compare_password, $stored_password) != $stored_password) {
$denied = TRUE;
} else {
$_SESSION['editor'] = $username;
// Keep user logged in with cookie, if they request it
if (isset($_POST['remember'])) {
create_persistent_login($username);
}
if (isset($_SESSION['referrer'])) {
$url = $_SERVER['HTTPS'] ? "https://" : "http://";
$url .= $_SERVER['HTTP_HOST'];
$url .= $_SESSION['referrer'];
unset($_SESSION['referrer']);
session_write_close();
header("Location: $url");
return;
} else {
session_write_close();
header("Location: https://xxx.org.za/publish/edit");
return;
}
}
}
?>
x.x.x: login
editor login
Access denied. Please try again.\n";
?>