| 
<?php
/*
 Available functions:
 function __construct($user, $pass, $passcheck = 'md5', $session = FALSE)
 function set_db_connection($serveraddr, $serveruser, $serverpass, $serverdbname)
 function set_table($dbtable)
 function set_fields($userfield, $passfield)
 function validate()
 function print_query()
 function get_user_info()
 */
 error_reporting(E_ALL);
 include('userchecker.class.php');
 
 //Get user data
 $username = $_POST['username'];
 $password = $_POST['password'];
 
 //Set MySQL information
 $serveraddr = '127.0.0.1';
 $serveruser = 'root';
 $serverpass = 'toor';
 $serverdbname = 'users';
 
 //Start session (not needed as the script will do it itself if no session is present)
 session_start();
 
 //Username and password can be passed directly as the class takes care of injection attempts
 //Remember to set the connection information using set_db_connection()!
 $user = new User($username, $password, 'md5');
 $user->set_db_connection($serveraddr, $serveruser, $serverpass, $serverdbname);
 $user->set_table("users");
 $user->set_fields('username', 'passwordhash');
 
 //Start output
 ?>
 <html>
 <head>
 <title>Simple login page</title>
 </head>
 <body>
 <?php
 
 if ($user->validate())
 {
 echo "Congratulations, your credentials have been accepted!";
 }
 else if ($user->validate() < 1 || empty($username) || empty($password))
 {
 ?><form action="" method="post"><input type="text" name="username" /><input type="password" name="password" /><input type="submit" value="Login" /></form><?php
 }
 ?>
 </body>
 </html>
 |