<?php
session_start();
?>
<?php
function controle($naam, $wachtwoord, $admin) {
if ($admin == false) {
$sql = "SELECT Klant_id, Username, Password FROM Klant WHERE Username='$naam'";
} else { // admin nodig? Haal eerste record op
$sql = "SELECT Klant_id, Username, Password FROM Klant WHERE Klant_id='8'";
}
$result = mysql_query($sql);
if (mysql_num_rows($result) > 0) {
$password = mysql_result($result, 0, "Password");
$klantid = mysql_result($result, 0, "Klant_id");
if ($wachtwoord != $password) {
return false;
} else {
return $klantid;
}
} else {
return false;
}
}
// Check naam en wachtwoord
if (isset($_POST['verzonden'])) {
$username = $_POST['username'];
$wachtwoord = ($_POST['wachtwoord']);
$klantid = controle($username, $wachtwoord, $admin);
if ($klantid != false) {
// Correct
$_SESSION['username'] = $username;
$_SESSION['wachtwoord'] = $wachtwoord;
$_SESSION['klantid'] = $klantid;
}
}
if (controle($_SESSION['username'], $_SESSION['wachtwoord'], $admin) == false) {
echo "<form method=\"post\" action=\"$PHP_SELF?";
reset($_GET); // Zet de array pointer op 0, begin bij het begin
// Stuur meegestuurd variabelen opnieuw mee.
while($getvar = each($_GET)) {
$varnaam = $getvar['key'];
$varinhoud = $getvar['value'];
echo "$varnaam=$varinhoud&";
}
echo "\">\n";
echo "</p>
<table border=\"1\" cellpadding=\"0\" cellspacing=\"0\" style=\"border-collapse: collapse; border-width: 0\" bordercolor=\"#111111\" width=\"100%\" id=\"AutoNumber1\" height=\"14\">
<tr>
<td width=\"28%\" style=\"border-style: none; border-width: medium\" height=\"12\">
<p align=\"right\"><font face=\"Arial\">Naam:</font></td>
<td width=\"72%\" style=\"border-style: none; border-width: medium\" height=\"12\">
<left><input type=\"text\" name=\"username\"></td>
</tr>
<tr>
<td width=\"28%\" style=\"border-style: none; border-width: medium\" height=\"12\">
<p align=\"right\"><font face=\"Arial\">Wachtwoord:</font></td>
<td width=\"72%\" style=\"border-style: none; border-width: medium\" height=\"12\">
<left><input type=\"password\" name=\"wachtwoord\"></td>
</tr>
</table>";
echo "<br>";
echo "<input type=\"submit\" value=\"verzenden\" name=\"verzonden\">";
echo "</form>";
echo "<p>Nog niet geregistreerd? <a href=\"aanmeldformulier.php\">[Registreer hier]</a><br>";
if ($admin == "true") {
echo "<p>--- Admin status is vereist!";
}
exit;
}
?>