Simpel login systeem

The mysql table:


CREATE TABLE `members` (
`id` int(11) NOT NULL auto_increment,
`users` text NOT NULL,
`password` text NOT NULL,
`ip` text NOT NULL,
`status`text NOT NULL,
UNIQUE KEY `id` (`id`)
) TYPE=MyISAM;


connect.inc.php

[code]

<?
$database ="";
$server ="localhost";
$user ="";
$passw ="********";
mysql_connect("$server","$user", "$passw"); 
mysql_select_db($database);
?>
[/code]

The register page(register.php):
[code]
Als iemand nieuw zich lid maakt wordt deze rang 1 gegeven dus member om iemand andere rechten te geven moet je naar de db gaan of zelf een scriptje maken.:P

<?
session_start();
?>
<font face=verdana size=1>

<?
if($_SESSION['login'] == "true"){
   print " You have allready an account.";//because your logged in stupid
}

include('connect.inc.php');
if(!isset($_REQUEST['submit'])){
?>
<form method=post acion=""<? $_SERVER['PHP_SELF'] ?>"">
<table>
   <tr>
      <td>
         <font face=verdana size=1>Username:
      </td>
      <td>
         <input type="text" name="name" maxlength="15">
      </td>
   </tr>
   <tr>
      <td>
         <font face=verdana size=1>Password:
      </td>
      <td>
         <input type="password" name="pass1">
      </td>
   </tr>
   <tr>
      <td>
         <font face=verdana size=1>Confirm:
      </td>
      <td>
            <input type="password" name="pass2">
      </td>
   </tr>
   <tr>
      <td>
         <input type="submit" value=submit name="submit">
      </td>
      <td>
         <input type="reset">
      </td>
   </tr>
</table>
</form>
<?php
}else{
   //request everything
   $dead = "false";//We make 'dead' if some fields are not filled in don't check for pass and name in db.
   $message = "<font face=verdana size=1>Pleas fill in all fields correctly:<br>";
   $username = $_POST['name'];
   $pass1 = $_POST['pass1'];
   $pass2 = $_POST['pass2'];
   $ip = $_SERVER['REMOTE_ADDR'];
   $status = "1";//1 member, 2,co-admin 3, admin
   //begin search for errors
   if(strlen($username) <= 1 or strlen($username) >=15){
      $dead = "true";
      $message .= "Username (2-14)<br>";
   }
   if(strlen($pass1) < 6 or strlen($pass1) > 20 or $pass1 !== $pass2) {
      $dead = "true";
      $message .= "Password (6-20) or passwords does not match";
   }
   if($dead = "false"){
      $username = strtolower(trim(strip_tags($username)));
      $pass1 = trim($pass1);
      $pass1 = md5($pass1);
      $query = mysql_query("SELECT * FROM members WHERE username ='$username'");
      $aantalrijen = mysql_num_rows($query);                   
      if($aantalrijen == 1){         
         print "<font face=verdana size=1>Sorry, your username exists allready.";         
      }
      else{
         $query1 = "INSERT INTO members(username, password, ip, status) VALUES ('$username','$pass1', '$ip','$status')";
         if(mysql_query($query1)){
             print "<font face=verdana size=1>Well donne your now a member of the RTD group.<br><a href=login.php>Login</a>";
         }   
      }
      
   }
   elseif($dead == "true"){
         print $message;
   }
}              
?>
[/code]

De login pagina(login.php):


[code]

<?
session_start()
?>
<?
if($_SERVER["login"] == "true") {
   print "<font size=1 face=verdana>Your logged in";
}
else {
   ?>
   <font size=1 face=verdana>
   <FORM action="login.php" method="post">         
   Username:<br>         
   <INPUT type="text" name="username">         
   <BR>         
   Wachtwoord:<br>         
   <INPUT type="password" name="pass"><br>         
   <input type="submit" value="submit" name="submit">         
   </form>       
<?
}
if(isset($_POST['submit'])) {
   $username = trim(strtolower($_POST['username']));
   $pass1 = $_POST['pass'];
   $dead = "false";
   $message = "<font size=1 face=verdana>Fill in the following fields correctly";
   if(strlen($username) <= 1 or strlen($username) >=15){
      $dead = "true";
      $message .= "Username (2-14)<br>";
   }
   if(strlen($pass1) < 6 or strlen($pass1) > 20) {
      $dead = "true";
      $message .= "Password (6-20)<br>";
   }
   if($dead = "false"){
      include('connect.inc.php');
      $pass1 = md5($pass1);
      $query = mysql_query("SELECT status FROM members WHERE username = '$username' and password = '$pass1'");
      $rows = mysql_num_rows($query);         
      if($rows > 0){         
         print "<font size=1 face=verdana>Your logged in as " . $username . ",<br> <a href=logout.php>log out.</a><br><a href=memberlist.php>memberlist</a>";         
             $row = mysql_fetch_assoc($query);
         $username = mysql_real_escape_string($username);
         $_SESSION['login']=true;           
         $_SESSION["username"]=$username;
         $_SESSION['rank']   = $row['status'];         
      }
      else{
         print "<font size=1 face=verdana>You filled in a wrong password and/or username";
      }         
      
   }
   else{
      print $message;
   }
}

?>
   
[/code]                         


Logout:(logout.php):

[code]
<?
session_start();
?>
<?
if(session_destroy()){//We destroy the session
   print "<font face=verdana size=1>You're logged out";
   print "<font face=verdana size=1><br><a href=login.php>login</a>";
}
?>


[/code]
Memberlist(memberlist.php):
[code]
<?
session_start();
?>
<font face=verdana size=1>
<?
if ($_SESSION["login"] == "true"){
   $username = $_SESSION["username"];
   print "<font face=verdana size=1>Hi, " . $username . "<br>";

   
include('connect.inc.php');       
$query = mysql_query("SELECT * FROM members");   
   
print "<table><tr bgcolor=#dcdcdc><td><font face=verdana size=1> # </td><td><font face=verdana size=1> Username </td></tr>";   
while ($gegeven = mysql_fetch_object($query)) {
$id = $gegeven->id;
$status = $gegeven->status;  //1 member, 2,co-admin 3, admin 
$naam = $gegeven->username;   
 
   
print "<tr><td><font face=verdana size=1>$id</td><td>";
if($status == 1){
   print "<font face=verdana size=1>" . $naam . "</font>";
}elseif($status == 2){
   print "<font color=orange face=verdana size=1>" . $naam . "</font>";
}elseif($status == 3){
   print "<font color=red face=verdana size=1>" . $naam . "</font>";
}
echo"</td></tr> ";   
}   
print "</table>";
?>    <font face=verdana size=1>Legend: Member | <font color=orange>Co-Admin</font> | 
<font color=red>Admin</font>
<?
}
else{
   print "<font face=verdana size=1>Hi guest you need to <a href=login.php>login</a> to see this page";
}
?> 
</font>
[/code]

admin.php
Dit bestand toont hoe het rank systeem werkt.

[code]

<?
session_start();

if($_SESSION['rank'] == "1") {
   print "Content only for members";
}
elseif($_SESSION['rank'] == "2") {
   print "Co-Admin content";
}
elseif($_SESSION['rank'] == "3") {
   print "admin content";
}
else{
   print "non-member content";
}
?>
[/code]

Dat was het comments zijn altijd welkom