php ,pomoc

Mozeli neki mali primjer php skripte T ipa ako je username i password tacni ,idi na "OVU" stranicu , a ako nisu reci podaci nisu tacni ...


tek sam poceo PHP i ovaj bi mi primjer mnogo pomogao uz komentare , Velika hvala unaprijed

Ako ides preko mysql npr:

$username = $_POST['username'];
$password = $_POST['password'];

$provjera = mysql_query("SELECT * FROM users WHERE username = '".$username."' AND password = '".$password."'" );

if(mysql_num_rows($provjera) == 1) {

//ako je tacan

echo "<meta http-equiv='refresh' content='0;stranica.php' />";

} else {
//ako je netacan

echo "<meta http-equiv='refresh' content='0;stranica.php' />";

}


Ovdje ti je security 0 samo da te podsjetim, ovo nemoj da koristis na stranicama ovo je samo primjer

znaci ovaj login proces sam izolirao sa svog sajta

struktura tabele korisnici

id | username | password(md5)

login_form.php

<form action="login_process.php" method="post">
<label>Username</label><input type="text" name="username" />
<label>Password</label><input type="password" name="password" />
<label>remember</label><input type="checkbox" name="remember" />
<input type="submit" name="login" value="Login" />
</form>


login_process.php
<?php
if ($_POST['login'])
{
$form_username = strtolower(mysql_real_escape_string($_POST['username']));
$form_password = md5($_POST['password']);

if($form_username&&$form_password)
{
$query = mysql_query("SELECT * FROM korisnici WHERE username='$form_username'" );

$numrows = mysql_num_rows($query);

if($numrows!=0)
{
while ($row = mysql_fetch_array($query))
{
$db_username = $row['username'];
$db_password = $row['password'];
}
// provjera da li je user upisao tacne podatke
if($form_username==strtolower($db_username)&&$form_password==$db_password)
{
//remember
if(isset($_POST['remember']))
{
setcookie("kuki_username", $db_username, time()+60*60*24); //24 sata
}
// session
$_SESSION['username'] = $db_username;
//redirect
header('Location: /');
}
else
echo "netačan username ili password";
}
else
echo "username ne postoji";
}
else
echo "unesi username i password";
}
?>