<?php
session_start();
//Поключаем конфиг
include("config.inc.php");
include("functions.inc.php");
$link = mysql_connect($DBSERVER, $DBUSER, $DBPASS)
or die("Can't connect" );

mysql_select_db($DB, $link) or die ("Can't select BD");


if ( isset( $_GET["action"]) and $_GET["action"]=="logout" ) unset( $_SESSION["SID"] );
//if ( isset($_COOKIE['hash'])){$_SESSION = getLogin($_COOKIE['hash']);}
//$_SESSION['SID'] = $_SESSION['uniq_id'];
//print_r($_SESSION['uniq_id']);


if(md5(crypt($_SESSION['user'],$_SESSION['password'])) != $_SESSION['SID'] || md5(crypt($_COOKIE['user'],$_SESSION['password'])) != $_SESSION['SID']) {

if(!$_POST['do']){

echo '
<form name="1" action="" method="post">
     email:<input name="login" type="text"; value=""> <br/>
     password:<input name="password" type="password" value="">  <br/>
     <input name="do" type="submit" value="Login">
</form>
<br/><a href="reg.php"/>Registration</a>
<br/><a href="lostpass.php">Lost your password?</a>';
}

if($_POST['do']) {

$login = $_POST['login'];
$upass = $_POST['password'];
if($login !='' AND $upass !='') {

$q1=mysql_query("SELECT * FROM `users` WHERE `email`='".$login."' AND `password`='".md5($upass.salt)."' AND `status`=1");

if(mysql_num_rows($q1)===1) {

$r=mysql_fetch_array($q1);
$_SESSION['user'] = $r['nick'];
$_SESSION['password'] = $r['password'];

$_SESSION['SID'] = md5(crypt($r['nick'], $r['password']));

@Header("Location: index.php");
}
else {echo 'Invalid email / password<br/><a href="index.php"/>Back</a> 
<br/><a href="reg.php"/>Registration</a>';}
}
else {echo 'There are no any information about your account<br/><a href="index.php"/>Back</a> 
<br/><a href="reg.php"/>Registration</a>';} 
}
}
else {

   $q2 = @mysql_query("SELECT * FROM `users` WHERE `nick`='".$_SESSION['user']."' AND `password`='".$_SESSION['password']."' AND `status`=1");
if(@mysql_num_rows($q2)==1){
   $r2 = @mysql_fetch_array($q2);
echo 'You are: '.ucfirst($r2['nick']).'<br/>';
echo '<a href="index.php">Home</a>   ';
echo '<a href="index.php?page=downloads">Downloads</a><br/>';
echo '<a href="account.php">Account panel</a><br/>';


 
if($_GET['page'] !='') {
@include("tpl/".$_GET['page'].".php");
}
else { @include("tpl/default.php");}


   echo '<br/><br/><a href="index.php?action=logout">Logout</a>';
}
   }
  if($_GET['exit']) {@session_destroy(); unset($_GET['exit']); mysql_close($link); @Header("refresh: 0; url= index.php");  @Header("Location: index.php"); }
?>  

if ( isset($_COOKIE['hash'])){$_SESSION = getLogin($_COOKIE['hash']);}

if(md5(crypt($_SESSION['user'],$_SESSION['password'])) != $_SESSION['SID']) {

Спустя 2 часа, 22 минуты, 7 секунд (25.08.2010 - 19:56) flint написал(а):

To: Rivalryzerg
Большое вам спасибо за советы они помогли мне разобраться
немного переделал свой скрипт теперь автологин работает