session_start(); include("func.inc.php"); $var=0; if (!empty($_POST)) { $sql="SELECT * FROM ban WHERE nick = '$_POST[nick]'"; $flow=db_query($sql); if(mysqli_num_rows($flow)!=0){ $var=-1; }else{ $sql="SELECT * FROM utenza WHERE nick = '$_POST[nick]'"; $flow=db_query($sql); if(mysqli_num_rows($flow)==0){ $var=1; }else{ $row = mysqli_fetch_array($flow); if ($row['password']==$_POST['pwd']) { $_SESSION['nick'] = $row['nick']; $_SESSION['id'] = $row['id']; $_SESSION['master'] = $row['master']; $sql="UPDATE utenza SET attivita=".time()." WHERE id=$_SESSION[id]"; $flow=db_query($sql); if (isset($_SESSION['location'])) { header("Location: ".$_SESSION['location']); }else{ header("Location: leggi.php"); } exit; }else{ $var=2; } } } } ?>
![]()