01.<?
02. session_start();
03. include "config2.php";
04.
05. $connection = mysql_connect($dbHost,$dbUser,$dbPass) or die ("Can't Connect database");
06. $db = mysql_select_db($dbName) or die ("Can't connect database");
07. mysql_query("SET NAMES 'UTF8'");
08. $strSQL = "SELECT * FROM match WHERE User = '".trim($_POST['User'])."' and Pass = '".trim($_POST['Pass'])."'";
09. $objQuery = mysql_query($strSQL);
10. $objResult = mysql_fetch_array($objQuery);
11. if(!$objResult)
12. {
13. echo "<p align=\"center\">Username Incorrect!</p>";
14. }
15. else
16. {
17. $_SESSION["User"] = $objResult["User"];
18. $_SESSION["Status"] = $objResult["Status"];
19.
20. session_write_close();
21.
22. if($objResult["Status"] == "ADMIN")
23. {
24. header("location:edit_match.php");
25. }
26. else
27. {
28. header("location:index.php");
29. }
30. }
31. mysql_close();
32.?>
Quote:
