deal_login.php

一个很好的同学录,PHP+TXT,没有数据库的网友的最好选择

<?
session_start();
switch($_GET['action']){
	case "in":
		if(!$_MYSQL_INC) include("conf_mysql.php");
		$sql="select id,sex,power,logintimes from mc_member where id like '".$_POST['id']."' and pass like password('".$_POST['pass']."') and power>0";
		$Myres=mysql_query($sql,$Mylink);
		if(mysql_num_rows($Myres))
		{
			$Mrow=mysql_fetch_row($Myres);
			$_SESSION['id']=$Mrow[0];
			$_SESSION['sex']=$Mrow[1];
			$_SESSION['power']=$Mrow[2];
			$_SESSION['logintimes']=$Mrow[3]+1;
			if($Mrow[2]>0) mysql_query("update mc_member set lastIP='{$_SERVER['REMOTE_ADDR']}',lastlogin=now(),logintimes=logintimes+1 where id like '{$_POST['id']}'",$Mylink);
			header("location: ".$_SERVER["HTTP_REFERER"]);
		}
		else {
			$error="昵称或密码有误,<br>或你尚为通过管理员的认证";
			include("inc_error.php");
		}
		break;
	case "out":
		session_unset();
	default:
		header("location: ./");
		break;
}
?>