function login($user_email, $user_password, $user_remember, $conn) { $user_password_encrypted = encrypt_password($user_password); $user_password = add_salt($user_password); $sql = "SELECT * FROM " . global_mysql_users_table . " WHERE user_email='{$user_email}' AND user_password='******' OR user_email='{$user_email}' AND user_password='******'"; $query = mysqli_query($conn, $sql); if (mysqli_num_rows($query) == 1) { $user = mysqli_fetch_array($query, MYSQLI_ASSOC); $_SESSION['user_id'] = $user['user_id']; $_SESSION['user_is_admin'] = $user['user_is_admin']; $_SESSION['user_email'] = $user['user_email']; $_SESSION['user_name'] = $user['user_name']; $_SESSION['user_reservation_reminder'] = $user['user_reservation_reminder']; $_SESSION['logged_in'] = '1'; if ($user_remember == '1') { $user_password = strip_salt($user['user_password']); setcookie(global_cookie_prefix . '_user_email', $user['user_email'], time() + 3600 * 24 * intval(global_remember_login_days)); setcookie(global_cookie_prefix . '_user_password', $user_password, time() + 3600 * 24 * intval(global_remember_login_days)); } mysqli_free_result($query); mysqli_close($conn); return 1; } }
function login($user_email, $user_password, $user_remember) { $user_password_encrypted = encrypt_password($user_password); $user_password = add_salt($user_password); $query = mysql_query("SELECT * FROM " . global_mysql_users_table . " WHERE user_email='{$user_email}' AND user_password='******' OR user_email='{$user_email}' AND user_password='******'") or die('<span class="error_span"><u>MySQL error:</u> ' . htmlspecialchars(mysql_error()) . '</span>'); if (mysql_num_rows($query) == 1) { $user = mysql_fetch_array($query); $_SESSION['user_id'] = $user['user_id']; $_SESSION['user_is_admin'] = $user['user_is_admin']; $_SESSION['user_email'] = $user['user_email']; $_SESSION['user_name'] = $user['user_name']; $_SESSION['user_reservation_reminder'] = $user['user_reservation_reminder']; $_SESSION['logged_in'] = '1'; if ($user_remember == '1') { $user_password = strip_salt($user['user_password']); setcookie(global_cookie_prefix . '_user_email', $user['user_email'], time() + 3600 * 24 * intval(global_remember_login_days)); setcookie(global_cookie_prefix . '_user_password', $user_password, time() + 3600 * 24 * intval(global_remember_login_days)); } return 1; } }