Wat doe ik fout?
<?php
session_start();
$con = mysql_connect("*****", "*****", "*****") or die('Kan niet verbinden met de server.' );
mysql_select_db("*****", $con) or die('Kan de database niet selecteren.' );
$fetchusers = mysql_query("SELECT * FROM users WHERE id = '" . $_SESSION['id'] . "'");
$fetchusers = mysql_fetch_assoc($fetchusers);
if ($_POST['submit'])
{
$username = $_POST['username'];
$password = $_POST['password'];
$sha1_password = (sha1($password));
$check_aantal = mysql_query("Select Count(username) From users Where username = '".mysql_escape_string($username)."' AND sha1_password = '".$sha1_password."'") or die(mysql_error());
if (mysql_result($check_aantal, 0))
{
$_SESSION['id'] = $fetchusers['id'];
}
else
{
echo "<br>Gebruikersnaam of wachtwoord incorrect.";
}
}
if (!isset($_SESSION['ip']))
{
$_SESSION['ip'] = $_SERVER['REMOTE_ADDR'];
}
if ($_SESSION['ip'] != $_SERVER['REMOTE_ADDR'])
{
trigger_error("<br>Session Hijacking gedetecteerd!", E_USER_WARNING);
}
if (isset($_SESSION['id']))
{
$fetchusers = mysql_query("SELECT * FROM users WHERE id = '" . $_SESSION['id'] . "'");
$fetchusers = mysql_fetch_assoc($fetchusers);
echo "<br>Ingelogd als: ".$fetchusers['username'].". | <a href='http://www.robinvandervliet.hostoi.com/myaccount.php?url=".$_SERVER['PHP_SELF']."'>Mijn account</a>. | <a href='http://www.robinvandervliet.hostoi.com/logout.php?url=".$_SERVER['PHP_SELF']."'>Uitloggen</a>.";
}
else
{
echo '<form method="post">';
echo 'Gebruikersnaam: <input type="text" name="username" size="15"> ';
echo 'Wachtwoord: <input type="password" name="password" size="15"> ';
echo '<input name="submit" type="submit" value="Inloggen">';
echo '</form>';
}
?>
