logincheck.php
<?php
session_name('bruger');
session_start();
include_once '../script/session_secure.inc.php';
session_secure();
$bruger = $_POST['bruger'];
$kode = $_POST['kode'];
$ip = $_SERVER['REMOTE_ADDR'];
$bruger = stripslashes($bruger);
$kode = stripslashes($kode);
$ip = stripslashes($ip);
$_SESSION['ip'] = $ip;
$_SESSION['bruger'] = $bruger;
$_SESSION['kode'] = $kode;
include '../script/connect.php';
$host = stripslashes($host);
$user = stripslashes($user);
$pass = stripslashes($pass);
$con = mysql_connect ("$host","$user","$pass");
if(!isset($con))
{
die('Kan ikke oprette forbindelse til Severen');
}
else
{
mysql_select_db("$db" , $con);
}
$bruger = mysql_real_escape_string($bruger);
$kode = mysql_real_escape_string($kode);
$ip = mysql_real_escape_string($ip);
sprintf("SELECT * FROM $table WHERE bruger='$bruger' and pass='$kode'");
$sql = "SELECT * FROM $table";
$result = mysql_query($sql,$con);
$count = mysql_num_rows($result);
if ($count==1)
{
echo "Du er nu loggget ind tryk på linket for at fortsætte!!";
echo "<br /><br />";
echo "<a href='../www/forside.php'>Fortsæt</a>";
}
else
{
echo "Forkert Brugernavn eller Kodeord";
}
mysql_close($con);
?>