auth_root.php

   1 <?php
   2
   3 include_once("conn.php");
   4
   5 /* verify username and password - do not pass if incorrect */
   6 if(!isset($_COOKIE["username"])) { include("login.php"); exit; }
   7 if(!isset($_COOKIE["password"])) { include("login.php"); exit; }
   8
   9 $_COOKIE["username"] = mysql_real_escape_string($_COOKIE["username"]);
  10 $_COOKIE["password"] = mysql_real_escape_string($_COOKIE["password"]);
  11
  12 $sql = "select count(*), user_id, role, name from users where email='". $_COOKIE["username"]. "' and password=SHA('".$_COOKIE["password"]."')";
  13
  14 $result = mysql_query($sql);
  15
  16 if (!$result) { die("SQL ERROR"); }
  17
  18 $row = mysql_fetch_row($result);
  19
  20 if($row[0] > 0) { } else { echo "Incorrect Username or Password."; }
  21
  22 /* if we don't get a good login, send username and password form and exit */
  23 if($row[0] < 1)  { include("login.php"); exit; }
  24
  25 /* set global var with user id and email address - shown on pages and used in URL's */
  26 $user_id = $row[1];
  27 $role = $row[2];
  28 $user_name = $row[3];
  29
  30 if($user_id == NULL) { die("User ID Not Set For This User. Contact Technical Support."); }
  31
  32 ?>