<?php
    if(isset($_POST['name1'])) {
        $name1 = $_POST['name1'];
    } else {
        $name1 = "";
?>
<input type='text' name='name1' value='<?=$name1; ?>' size='20'>

<?php
session_start();
error_reporting (E_ALL);

require('mysql.php');

$result = mysql_query("SELECT * FROM `" . $usertable . "`  WHERE LCASE(`name`) = LCASE('" . isset($_POST['name1']) . "') AND `pw` = '" . md5(isset($_POST['pw1'])) . "'");

if(mysql_num_rows($result) == 1) 
{
	$row = mysql_fetch_array($result);
	
	$name1 = $row['name'];
	$_SESSION['name1'] = isset($_POST['name1']);
	$_SESSION['pw1']   = isset($_POST['pw1']);
	$userid = $row['id'];
	$rang = $row['rang'];
	$email = $row['email'];
	$icq = $row['icq'];
}	
else
{
	if(isset($_POST['login'])) 
{ 
  echo 'login incorrect'; 
} 
  else 
{ 
  ?> <form method='post' action='usermenu.php'> 
   <table width='200'> 
      <tr> 
      <td width='50'> 
         username: 
      </td> 
      <td width='150'> 
	  <?php 
  	  if(isset($_POST['name1'])) 
	  { 
   	     $name1 = $_POST['name1']; 
  	  } else { 
  	      $name1 = ""; 
		?> 
		 <input type='text' name='name1' value='<?php $name1; ?>' size='20'>
      </td> 
      </tr> 
      <tr> 
      <td width='50'> 
         password: 
      </td> 
      <td width='150'> 
         <?php 
 	   if(isset($_POST['pw1'])) 
	   { 
 	       $pw1 = $_POST['pw1']; 
   	   } else { 
  	       $pw1 = ""; 
		?> 
<input type='text' name='name1' value='<?php $pw1; ?>' size='20'>
	  </td> 
      </tr> 
      <tr> 
      <td colspan='2'> 
         <input type='submit' value='Login'> 
      </td> 
      </tr> 
   </table> 
   </form> 
<?php 
}
 
if(isset($_GET['logout']) && $_GET['logout'] == 1)
	{
	session_unset();
	session_destroy();
	echo 'logged out'; ?>
	back to main	
	<?php
	}
else
	{
	echo 'logout error'; 
	};
?>