<?php
	//login_handler.php
	session_start();

 	include('connect.inc.php');

	$struser= $_POST['user'];
	$strpass= $_POST['pass'];
	$sql = "SELECT id, user, pass, rang FROM member";
	$result = mysql_query($sql) OR die(mysql_error());
	//hier die userabfrage.. ob es den user gibt =>login
	while($row = mysql_fetch_assoc($result)) {
		if(($row['user']==$user) and ($row['pass']==$pass)) {
			$strid=$row['id'];
			$struser=$row['user'];
			$strrang=$row['rang'];
			$strlogin=date("d.m.Y");

			$_SESSION['id']=session_id();
			$_SESSION['id2']= $strid;
			$_SESSION['user'] = $struser;
			$_SESSION['rang']= $strrang;

			break;
		}
	}

	header("Location: login.php");
?>

<?php
	//login.php
	include('connect.inc.php');
	session_start();
	if ($_SESSION['id']!="") {
		$user = $_SESSION['user'];
		$rang = $_SESSION['rang'];
		echo("Hallo ".$user."

");
		echo("Du kannst folgendes machen: 

");
		switch($rang) {
			//...
		}
	} else {
		echo("<form method='post' action='login_handler.php' target=''>");
		//... das form-zeug
		echo("</form>");
	}
?>

<?php
session_start();
setcookie(session_name(), session_id(), time()+3600);