<?
session_start();
?>
<?
include("config.php");
$username=$HTTP_POST_VARS[username];
$password=$HTTP_POST_VARS[password];
$query = mysql_query("SELECT * FROM users WHERE username='$username'");
$session = mysql_num_rows($query);
if ($session != NULL)
{
$query1=mysql_query("SELECT * FROM users WHERE username='$username' AND password='$password'");
$session1=mysql_num_rows($query);
if ($session1 != NULL)
echo "<p class='margin'><center>Здравейте, <b>".$username."</b>!<br />";
}
else
{
echo "Грешна парола за потребител: <b>".$username."</b> !";
}
$HTTP_SESSION_VARS[username]=$username;
?>
<?
include("config.php");
if (isset($HTTP_SESSION_VARS['username']))
{
$username=$HTTP_SESSION_VARS['username'];
}
else
{
echo '';
}
$query=mysql_query("SELECT * FROM users WHERE username='$username'");
$result=mysql_fetch_row($query);
$gender=$result;
echo '
<table border="0">
<tr><th colspan="2">Статистики:</th></tr>
<tr><th align="left">Име:</th><td>'.$username.'</td></tr>
<tr><th align="left">Пол:</th><td>'.$gender.'</td></tr>
</table>
';
?>
<?
session_start();
include("config.php");
$username=$HTTP_POST_VARS[username];
$password=$HTTP_POST_VARS[password];
$query = mysql_query("SELECT * FROM users WHERE username='$username'");
$session = mysql_num_rows($query);
if ($session != NULL)
{
$query1=mysql_query("SELECT * FROM users WHERE username='$username' AND password='$password'");
$session1=mysql_num_rows($query);
if ($session1 != NULL)
echo "<p class='margin'><center>Здравейте, <b>".$username."</b>!<br />";
$_SESSION['userinfo'] = mysql_fetch_assoc($query);
}
else
{
echo "Грешна парола за потребител: <b>".$username."</b> !";
}
$HTTP_SESSION_VARS[username]=$username;
?>
<?
include("config.php");
$user = $HTTP_SESSION_VARS['username'];
$mysql = mysql_query("SELECT * FROM users where username = '$user'");
while($row = mysql_fetch_array($mysql)){
echo"UserName: $row['username']";
echo"gender: $row['gender']";
}
?>
P.S. Правиш много, ненужни проверки.Стига една, с която да провериш дали потребителското име и парола са верни.<?
session_start();
include("config.php");
$username=$_POST[username];
$password=$_POST[password];
$query = mysql_query("SELECT COUNT(*) FROM users WHERE username='$username' AND password='$password'") or die(mysql_error()); //една заявка, с която проверяваш(преброяваш) дали има съвпадение.Ако има, би трябвало резултата да е 1, тоест по-голямо от 0
if(mysql_result($query, 0, 0)>0){
echo "<p class='margin'><center>Здравейте, <b>".$username."</b>!<br />";
$_SESION['username']=$username;
}
else
{
echo "Грешна парола за потребител: <b>".$username."</b> !";
}
?>