<!-- Copyright 2004 by Danny Trunk - Alle Rechte vorbehalten --!>
<?php
class mysql
{

  function connect($host, $username, $passwort, $db)
  {
    mysql_connect($host, $username, $passwort) or die (header("Location: error.php?error=".mysql_error().""));
    mysql_select_db($db) or die (header("Location: error.php?error=".mysql_error().""));
  }

}
?>
<!-- Copyright 2004 by Danny Trunk - Alle Rechte vorbehalten --!>

<?php
//* Copyright 2004 by Danny Trunk - Alle Rechte vorbehalten

session_start();
include("../inc/classes.inc.php");
include("../inc/config.inc.php");
$mysql = new mysql;
$mysql->connect($host, $username, $passwort, $db);

$result = mysql_query("SELECT id, username, passwort, email FROM cms_admin WHERE username = '".$_REQUEST['username']."' AND passwort = '".md5($_REQUEST['passwort'])."'") or die (mysql_error());

if(mysql_num_rows($result) > 0)
{
  $row = mysql_fetch_array($result);

  $_SESSION['user_id'] = $row['id'];
  $_SESSION['user_name'] = $row['username'];
  $_SESSION['user_pass'] = $row['passwort'];
  $_SESSION['user_mail'] = $row['email'];

  header("Location: admin.php");
}
else
{
  header("Location: index.php?access=denied");
}
?>
<!-- Copyright 2004 by Danny Trunk - Alle Rechte vorbehalten --!>