isset($_POST['login']) ? $login=addslashes(trim($_POST['login'])):$login='inconnu';
isset($_POST['passwd']) ? $passwd=addslashes(trim($_POST['passwd'])):$passwd='inconnu';
select * from admin where login="inconnu" and passwd="inconnu"
$login = (isset($_POST['login'])) ? addslashes(trim($_POST['login'])) : 'inconnu';
$passwd = (isset($_POST['passwd'])) ? addslashes(trim($_POST['passwd'])) : 'inconnu';
<?
include ('config.php');
$date = date("d/M/Y");
isset($_POST['date']) ? $date=$_POST['date']:$date='';
isset($_POST['hour']) ? $hour=$_POST['hour'])):$hour='';
isset($_POST['login']) ? $login=addslashes(trim($_POST['login'])):$login='inconnu';
isset($_POST['mdp']) ? $mdp=addslashes(trim($_POST['mdp'])):$mdp='inconnu';
if ($login == ''){
echo("Erreur login");
}
if ($mdp == ''){
echo("Erreur mdp");
}
else
{
$connection = mysql_connect($host, $user, $pass) or die(mysql_error());
$db = mysql_select_db($DB, $connection) or die(mysql_error());
$req='select * from admin where login="'.$login.'" and mdp="'.$mdp.'"';
$res=mysql_query($req) or die ('Erreur:'.mysql_error());
echo $req;
if(mysql_num_rows($res)>0)
{
$_SESSION['login']=$login;
$_SESSION['auth']='oui';
echo 'Bienvenu '.$_SESSION['login'].'<br>';
}
else
{
echo 'Echec de connexion';
}
}
?>
