Просмотр файла login.php

<?php
require 'inc/func.php';
bk_head('LogIn');
require 'inc/head.php';

if($user){
header('location: index.php');
}

echo '<div class="list1"><div class="tt">&nbsp;'.$lng_log['title'].'</div>';

if(isset($_GET['username']) && isset($_GET['password'])){
$username = bk_check($_GET['username']);
$password = bk_check($_GET['password']);
$md5pass = md5($password);

$q = mysql_query("SELECT * FROM `users` WHERE `username` = '$username' ");
if(mysql_num_rows($q )> 0){

$u = mysql_fetch_assoc($q);
if($u['pass'] != $md5pass){
err(''.$lng_log['erp'].' <a href="'.$_SERVER['HTTP_REFERER'].'">'.$lng_log['back'].'</a>');
}else{
mysql_query("UPDATE `users` SET `last_active` = ".time()." WHERE `username` = '{$username}'");

if (isset($_POST['rem']) == 1){
setcookie('user', $username, time()+3600*24*365, '/');
setcookie('pass', $password, time()+3600*24*365, '/');
setcookie('userid', $u[id], time()+3600*24*365, '/');
}else{
$_SESSION['user'] = $username;
$_SESSION['pass'] = $password;
$_SESSION['userid'] = $u['id'];
}
echo ''.$lng_log['success'].' <br/>Auto link:&nbsp;<input type="text" value="'.homeurl.'/login.php?username='.$username.'&password='.$password.'&rem=1"><br />'.$lng_log['bookmark'].'<br /><a href="/index.php">'.$lng_log['enter'].'</a>'; 
}

}else{
err(''.$lng_log['er'].' <a href="'.$_SERVER['HTTP_REFERER'].'">'.$lng_log['back'].'</a>');
}
}else{
echo '<form method="get">'.$lng_log['username'].'<br/><input type="text" name="username" value="" size="15" class="name"><br/>
'.$lng_log['password'].'<br/><input type="password" name="password" value="" size="15" class="pass"><br/><input type="checkbox" name="rem" value="1" /><b style="font-size:12px;">'.$lng_log['rem'].'</b><br />
<input type="submit" value="'.$lng_log['but'].'"></form>';

}

echo '</div>';

bk_foot();
?>