Просмотр файла admin/avto.php

<?
//Скрипт магазина icq-номеров
//Автор SHuRiK(aka LLlypuk)
//Icq: 377248037
//WebMoney R: R338551915279
//WebMoney Z: Z850050838586
//E-Mail: [email protected]
//
//Декабрь 2009
//Цена: бесплатно
include "db.php";
if (isset($_POST['auth_name'])) {
$name=mysql_real_escape_string($_POST['auth_name']);
$pass=mysql_real_escape_string($_POST['auth_pass']);
$query = "SELECT * FROM admin WHERE login='$name' AND pass='$pass'";
$res = mysql_query($query) or trigger_error(mysql_error().$query);
if ($row = mysql_fetch_assoc($res)) {
session_start();
$_SESSION['user_id'] = $row['id'];
$_SESSION['ip'] = $_SERVER['REMOTE_ADDR'];
}
header("Location: http://".$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);
echo "<center><div class=alert>Введенный логин/пароль неверны.</div></center>"; 
exit;
}
if (isset($_REQUEST[session_name()])) {@session_start();}
if (isset($_SESSION['user_id']) AND $_SESSION['ip'] == $_SERVER['REMOTE_ADDR']) return;
else {

?>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />
<title>Администрирование</title>



<form method="POST">
Логин:	<input type="text" name="auth_name"><br />
Пароль:	<input type="password" name="auth_pass"><br />
		<input type="submit" value="вход" />
</form>
<br><br><br><br>
<?
}
exit;
?>