<?php
include 'include/config.php';
include 'include/header.php';
include 'include/librery.php';
session_start();
?>
<div id="wrapper">
<?php
if(!isset($_SESSION['login'])){
$p = $_GET['action'];
// login.php?action=login
if($p == "login"){
if(!isset($_POST['invia'])){ ?>
<form method="post" action="#" id="formlogin">
<label for="username">Username</label>
<input type="text" name="username" id="username" /><br>
<label for="password">Password</label>
<input type="password" name="password" id="password" /><br>
<input type="submit" name="invia" id="login" value="Accedi" />
</form>
<?php } else {
$username = mysql_real_escape_string($_POST['username']);
$password = mysql_real_escape_string($_POST['password']);
if($username == "" || $password == ""){
echo "Attenzione, devi compilare tutti i campi";
} else {
$pass = md5($password);
$sql = "SELECT * FROM $tb_usr WHERE username = '$username' AND password = '$pass'";
$result = mysql_query($sql);
$conut = mysql_num_rows($result);
echo $count;
if ($count == 1) {
$_SESSION['login'] = $username;
}else {
echo 'Utente sconosciuto!';
}
}
}
// login.php?azione=logout
} elseif ($p == "logout"){
echo "Logout effettuato con successo!<a href='index.php'>Home</a>";
session_destroy();
}
}else{
echo "Sei gia loggato!";
}
?>
</div>
</body>
</html>
