The script below checks a user name and password against a MySQL query and refers the user to a new page on successful login, or prompts them to try again on a failed login.
Note that you don't need to explicitly register a session variable; instantiating it registers it.
<?
session_start();
$link = mysql_pconnect( 'localhost', 'username', 'password') or die( 'Cannot connect to db' );
mysql_select_db( 'database' ) or die(' cannot select db' );
$message = "Please log in. "
if( isset( $_POST['submit'] ) ) {
$query = "SELECT * FROM login_id_table WHERE usercolumn = '" . mysql_escape_string( $_POST['user'] ) . "' AND passcolumn = '" . mysql_escape_string( $_POST['pass'] ) . "'";
$rs = mysql_query( $query ) or die ('Cannot get login info' );
if( mysql_num_rows( $rs ) > 0 ) {
$_SESSION['loginid'] = $_POST['user'];
header( "Location: newpage. php" );
else {
$message = "Login failed. Please try again. "
}
}
<html>
<head>
<title>Login Page</title>
</head>
<body>
<h2>Login Form</h2>
<p><? echo $message; ?></p>
<form id="form1" name="form1" method="post">
<p>User name: <input type="text" id="user" name="user" size="30" value="<% echo $_POST['user']; %>" /></p>
<p>Password: <input type="text" id="pass" name="pass" size="30" value="<% echo $_POST['pass']; %>" /></p>
<p><input type="submit" name="submit" id="submit" value="Submit" /></p>
</form>
</body>
</html>
