[PHP] pobierz, plaintext 
<?
session_start();
 
include 'config.php';
	global $db;
 
$zalogowany = $_SESSION['login'];
 
	if(empty($_GET)) { index(); }
	if($_GET['cmd'] == 'zaloguj') { zaloguj($db); }
 
 
function index() {
 
	if($zalogowany == 'y') { panel(); }
	else {
		echo'<form action="login.php?cmd=zaloguj" method="POST">
		<input type="text" name="id"><br>
		<input type="password" name="password"><bR>
		<input type="submit"><br>';
		}
}
 
function zaloguj($db) {
 
$stmt = $db -> prepare('SELECT id, password WHERE `id` = :id AND `password` = :password');
$stmt->bindValue(':id', addslashes(htmlspecialchars($_POST['id'])), PDO::PARAM_INT);
$stmt->bindValue(':password', addslashes(htmlspecialchars($_POST['password'])), PDO::PARAM_STR);
$stmt->execute();
 
 foreach ($stmt as $r) {
$id_check = $r['id'];
$password_check = $r['password'];
}
 
if ($_POST['id'] == $id_check && $_POST['password'] == $password_check) {
$_SESSION['login'] = 'y';
print 'Zostałeś zalogowany.<br><a href="index.php">Index</a><br>';
}
else { print 'Podałeś złe dane.'; }
 
}
 
?>
[PHP] pobierz, plaintext