<?php

$link = mysql_connect("serwer", "user", "password")

        or die ("blad1");

mysql_select_db ("database");

function autoryzacja() {

    header('WWW-Authenticate: Basic realm="Strefa"');

    header('HTTP/1.0 401 Unauthorized');

    echo 'Text to send if user hits Cancel button';

    exit;



}

  if (!isset($_SERVER['PHP_AUTH_USER'])) {



  } else {

         $zapytanie =  "SELECT * FROM users WHERE user = '$PHP_AUTH_USER'";

         $rezultat = mysql_query ($zapytanie);

         $wiersz = mysql_fetch_assoc ($rezultat);

         $r = $HTTP_GET_VARS["r"];

         if ($PHP_AUTH_PW == $wiersz["passwd"])

         {

         function losuj() {

          list($usec,$sec) = explode(" ", microtime());

          return ((float)$sec+(float)$usec) * 100000;

         }

      srand (losuj());

      $code = rand(0,10000);

      setcookie ("ciasteczko", "$code", time()+3600);

      setcookie ("ciacho", "$PHP_AUTH_USER", time()+3600);

      $datam = date("m");

      $datad = date("d");

      $datay = date("Y");

      $y="$datay";

      $d="$datad";

      $m="$datam";

      $ost_log = "$d/$m/$y";

      $zapytanie = "UPDATE users SET code=$code, last_log='$ost_log' WHERE user ='$PHP_AUTH_USER'";

      mysql_query($zapytanie) or die ("Błąd w zapisie");

         if (!$r) {

           header("Location: plik.php");

         } else {

           header("Location: $r.php");

         }

      } else {

        autoryzacja();

      }

  }

?>