require_once("includes/connect.inc");
$title = "Welcome!";
$index = 1;
if(isset($_POST['f_submit'])){
if($_POST['f_username'] == "" || $_POST['f_password']== ""){
redirect("index.php?error=2");
}
$un = $_POST['f_username'];
$pw = $_POST['f_password'];
$sqlLogin = "SELECT clientID, clientName, companyID, clientEmail FROM tblclient WHERE clientUserName = '$un' AND clientActive = 1 AND clientPass = PASSWORD('$pw')";
//echo("checking for bad login
".$sqlLogin."
");
$rsLogin = mysql_query($sqlLogin) or die(mysql_error());
//print_r($rsLogin);
// echo("
".mysql_num_rows($rsLogin)."
");
//die();
if(mysql_num_rows($rsLogin) < 1){
mysql_query("INSERT INTO auditLogins(alName, alAddr, alFrom, alTrue) VALUES('$un', '$REMOTE_ADDR', 2, 0)");
redirect("index.php?error=1");
}
else{
echo ("login ok");
mysql_query("INSERT INTO auditLogins(alName, alAddr, alFrom, alTrue) VALUES('$un', '$REMOTE_ADDR', 2, 1)");
$resLogin = mysql_fetch_array($rsLogin);
// session_register("sess_userid");
// session_register("sess_name");
// session_register("sess_email");
// session_register("sess_coid");
// session_register("sess_coname");
// session_register("sess_coemail");
// session_register("sess_cophone");
$_SESSION['sess_userid'] = $resLogin['clientID'];
$_SESSION['sess_name'] = $resLogin['clientName'];
$_SESSION['sess_email'] = $resLogin['clientEmail'];
$_SESSION['sess_coid'] = $resLogin['companyID'];
$rsComp = mysql_query("SELECT companyName, companyPhone, companyEmail FROM tblcompanyinfo WHERE companyID = $resLogin[companyID]");
$resComp = mysql_fetch_array($rsComp);
$_SESSION['sess_coname'] = $resComp['companyName'];
$_SESSION['sess_coemail'] = $resComp['companyEmail'];
$_SESSION['sess_cophone'] = $resComp['companyPhone'];
redirect("main.php");
}
}
require_once("includes/header.inc");
if(isset($_SESSION['sess_userid'])){
redirect("main.php");
}
?>
If you've just created an account and have been kicked back to here, this is normal.
Please enter your new username and password, and then make sure that you have your project password handy!
Don't have an account? Click Here!
Please note that to use online ordering, you need