Voici mon code:
<?php
if(!isset($_SESSION['log']))
{
if (isset($_POST['username']) && ($_POST['pass']))
{
$username=$_POST['username'];
$pass=$_POST['pass'];
mysql_connect ('127.0.0.1', 'root', '') or die ('imposible de se connecter');
mysql_select_db('test2') or die ('impossible de se connecter à la bd');
$reqsql= "SELECT * FROM log WHERE nick ='".mysql_real_escape_string( $_POST['username'])."'
AND pass ='".mysql_real_escape_string( $_POST['pass'])."'";
$req = mysql_query($reqsql) or die('Erreur SQL !<br>'.$sql.'<br>'.mysql_error());
$donne = mysql_fetch_array($req);
if($donne['pass'] != $pass)
{
echo '<p>Mauvais login / password. Merci de recommencer</p>';
}
else
{
$_SESSION['log'] = "$username";
echo 'Salut'.$_SESSION['log'].'<br />';
}
}
else
{
echo '<form action="index.php" method="post">';
echo ' Email: * <input type="text" class="pos_nou_compte" size="15" name="username" /><br/><br/><br/>';
echo ' Mot de passe: * ';
echo ' <input type="password" size="13" name="pass" /><br/><br/><br/>';
echo ' <input type="submit" value="Envoyer" />';
echo ' </form>';
}
}
?>