Check login / login

[andy_b_1502]

Hi everyone i wonder if you can help me here:

 

I need a script for a login and check login- create cookie.

 

Here is my form:

 

<form method="post" action="check_login.php">

<p>

<input type="submit" name="Submit2" value="go" />

</fieldset>

</p>

</form>

 

that sends it to check_login (which BEFORE i deleted something by accident, used to take me to a username and password box)

 

But now all it does is send me straight to the memebrs area???

 

 

Can i change the check_login.php script to make it work correctly:

 

<?php 
// Connects to your Database 
mysql_connect("server", "user", "password") or die(mysql_error()); 
mysql_select_db("DB") or die(mysql_error()); 

//Checks if there is a login cookie
if(isset($_COOKIE['ID_my_site']))

//if there is, it logs you in and directes you to the members page
{ 
$username = $_COOKIE['ID_my_site']; 
$pass = $_COOKIE['Key_my_site'];
$check = mysql_query("SELECT * FROM users WHERE username = '$username'")or die(mysql_error());
while($info = mysql_fetch_array( $check )) 	
{
if ($pass != $info['upassword']) 
{
}
else
{
header("Location: members_area.php");

			}
		}
}

//if the login form is submitted 
if (isset($_POST['submit'])) { // if form has been submitted

// makes sure they filled it in
	if(!$_POST['username'] | !$_POST['upassword']) {
		die('You did not fill in a required field.');
	}
	// checks it against the database

	if (!get_magic_quotes_gpc()) {
		$_POST['email'] = addslashes($_POST['email']);
	}
	$check = mysql_query("SELECT * FROM users WHERE username = '".$_POST['username']."'")or die(mysql_error());

//Gives error if user dosen't exist
$check2 = mysql_num_rows($check);
if ($check2 == 0) {
		die('That user does not exist in our database. <a href=register.php>Click Here to Register</a>');
				}
while($info = mysql_fetch_array( $check )) 	
{
$_POST['upassword'] = stripslashes($_POST['upassword']);
	$info['upassword'] = stripslashes($info['upassword']);
	$_POST['upassword'] = md5($_POST['upassword']);

//gives error if the password is wrong
	if ($_POST['upassword'] != $info['upassword']) {
		die('Incorrect password, please try again.');
	}
  else 
{ 

// if login is ok then we add a cookie 
	 $_POST['username'] = stripslashes($_POST['username']); 
	 $hour = time() + 3600; 
setcookie(ID_my_site, $_POST['username'], $hour); 
setcookie(Key_my_site, $_POST['upassword'], $hour);	 

//then redirect them to the members area 
header("Location: members_area.php"); 
} 
} 
} 
else 
{	 

// if they are not logged in 
?> 
<form action="<?php echo $_SERVER['PHP_SELF']?>" method="post"> 
<table width="316" height="120" border="0"> 
<tr><td colspan=2><h1>Login</h1></td></tr> 
<tr><td>Username:</td><td> 
<input type="text" name="username" maxlength="40"> 
</td></tr> 
<tr><td>Password:</td><td> 
<input type="password" name="upassword" maxlength="50"> 
</td></tr> 
<tr><td colspan="2" align="right"> 
<input type="submit" name="submit" value="Login"> 
</td></tr> 
</table> 
</form> 
<?php 
} 

?>