1 files changed, 30 insertions, 0 deletions

@@ -0,0 +1,30 @@
+<?php
+
+if (!isset($_GET['submit']))
+{
+
+?>
+<FORM ACTION="/admin/login.php?submit=" METHOD="POST">
+Username: <INPUT TYPE="text" NAME="user"><BR>
+Password: <INPUT TYPE="password" NAME="pass"><BR>
+<INPUT TYPE="submit"></FORM>
+<?php
+
+} else {
+        $getconfig = "SELECT * FROM config WHERE name = \"username\" OR name = \"password\" ORDER BY name DESC";
+        $getconfig2 = mysql_query($getconfig) or die($getconfig);
+        $username = mysql_fetch_array($getconfig2);
+        $password = mysql_fetch_array($getconfig2);
+
+        if (($username['value'] == $_POST['user']) && ($password['value'] == md5($_POST['pass'])))
+        {
+                $_SESSION['username'] = $_POST['user'];
+
+                header('Location: /admin/');
+                exit;
+        } else {
+?><H2>Incorrect login</H2><?php
+        }
+}
+
+?>