login.php

c++下s60终端对终端传输协议

<?
/*
 * Copyright 2005 Nokia. All rights reserved.
 */

session_start();
include 'database_access.php';

$query = "select user.id, userrolemap.roleid, user.login from user, userrolemap where userrolemap.userid = user.id and login = '".$_POST['username']."' and password = Password('".$_POST['password']."')";
$result = mysql_query($query);

if (mysql_error())
{
  $_SESSION['error'] = mysql_error();
  header('Location: index.php');
}

$row = mysql_fetch_array($result);
echo $row['user_id'];
if ($row)
{
  $_SESSION['user_id'] = $row[0];
  $_SESSION['user_role'] = $row[1];
  $_SESSION['username'] = $row[2];
  //administrator
  if ($row[1] == 1)
    {
    header('Location: accounts.php');
    }
  else
    {
      header('Location: tasks.php');
    }
}
else
{
  $_SESSION['error'] = 'Invalid username or password';
  header('Location: index.php');
}
?>