login.php

开源的 库存管理系统 www.minierp.cn php+ mysql

<?php
 include ("../inc/db.php");
 include ("../inc/phpmkrfn.php");
 include ('../inc/xtpl.php');
 include ('../log/log.php'); 

 $t_UID  =$_POST["uname"];
 $t_UPASS=$_POST["upass"];
 $t_UNUM =$_POST["unum"];
 $t_lang =$_POST["login_language"];

session_start();

 $t_UPASS=MD5($t_UPASS);

	$conn = phpmkr_db_connect(HOST, USER, PASS, DB, PORT);
    $sSql ="select * from user where UID='$t_UID'";
	$rs  = phpmkr_query($sSql,$conn) or die("Failed to execute query: " . phpmkr_error() . '<br>SQL: ' . $sSql);

if (phpmkr_num_rows($rs) > 0 ){


		$row = mysql_fetch_array($rs, MYSQL_ASSOC);
		$Uid=$row[UID];
		$Una=$row[UNAME];
		$Ups=$row[UPASS];
		//echo $Ups."::".MD5($t_UPASS);
		if($t_UPASS==$Ups){
		$_SESSION["uid"] = "$Uid";
		$_SESSION["una"] = "$Una";
		$_SESSION["fac"] = FACTY; 
		$_SESSION['authenticated_user_language'] = $t_lang;
		operlogin($Uid,$conn);

		header("location:../index.php");
		echo $_SESSION["uid"].":".$_SESSION["una"];
	   }
    }
//}

		$xtpl=new XTemplate ("../home/login.html");
		$xtpl->assign("MSG_LONUM",$err_lonum);
		$xtpl->parse("main");
		$xtpl->out("main");
		exit;
?>