<?php
error_reporting(-1);
 
if (isset($_POST['submit'])) {
 
	include('config.php');
	$link = mysqli_connect($db['host'], $db['user'], $db['pass'], $db['name']);
 
	$login = mysqli_real_escape_string($link, $_POST['username']);
	$password = trim(md5($_POST['password']));
 
	$query = "SELECT user_id, user_login, user_password FROM users WHERE user_login = '" . $login . "' LIMIT 1";
 
	$queryResult = mysqli_query($link, $query) or die(mysqli_error($link));
	$dbData = mysqli_fetch_assoc($queryResult);
 
	$validHash = $dbData['user_password'];
 
	if (($dbData == NULL) or ($validHash != $password)) {
		echo "Неправильное имя пользователя или пароль";
	} else {
		session_start();
		$_SESSION['user_login'] = $dbData['user_login'];
		$_SESSION['user_id'] = $dbData['user_id'];
		header('Location: /index.php');
	}
 
}
 
include ('login.html');
 
?>

PD9waHAKZXJyb3JfcmVwb3J0aW5nKC0xKTsKCmlmIChpc3NldCgkX1BPU1RbJ3N1Ym1pdCddKSkgewoJCglpbmNsdWRlKCdjb25maWcucGhwJyk7CgkkbGluayA9IG15c3FsaV9jb25uZWN0KCRkYlsnaG9zdCddLCAkZGJbJ3VzZXInXSwgJGRiWydwYXNzJ10sICRkYlsnbmFtZSddKTsKCgkkbG9naW4gPSBteXNxbGlfcmVhbF9lc2NhcGVfc3RyaW5nKCRsaW5rLCAkX1BPU1RbJ3VzZXJuYW1lJ10pOwoJJHBhc3N3b3JkID0gdHJpbShtZDUoJF9QT1NUWydwYXNzd29yZCddKSk7CgkKCSRxdWVyeSA9ICJTRUxFQ1QgdXNlcl9pZCwgdXNlcl9sb2dpbiwgdXNlcl9wYXNzd29yZCBGUk9NIHVzZXJzIFdIRVJFIHVzZXJfbG9naW4gPSAnIiAuICRsb2dpbiAuICInIExJTUlUIDEiOwoKCSRxdWVyeVJlc3VsdCA9IG15c3FsaV9xdWVyeSgkbGluaywgJHF1ZXJ5KSBvciBkaWUobXlzcWxpX2Vycm9yKCRsaW5rKSk7CgkkZGJEYXRhID0gbXlzcWxpX2ZldGNoX2Fzc29jKCRxdWVyeVJlc3VsdCk7CgoJJHZhbGlkSGFzaCA9ICRkYkRhdGFbJ3VzZXJfcGFzc3dvcmQnXTsKCglpZiAoKCRkYkRhdGEgPT0gTlVMTCkgb3IgKCR2YWxpZEhhc2ggIT0gJHBhc3N3b3JkKSkgewoJCWVjaG8gItCd0LXQv9GA0LDQstC40LvRjNC90L7QtSDQuNC80Y8g0L/QvtC70YzQt9C+0LLQsNGC0LXQu9GPINC40LvQuCDQv9Cw0YDQvtC70YwiOwoJfSBlbHNlIHsKCQlzZXNzaW9uX3N0YXJ0KCk7CgkJJF9TRVNTSU9OWyd1c2VyX2xvZ2luJ10gPSAkZGJEYXRhWyd1c2VyX2xvZ2luJ107CgkJJF9TRVNTSU9OWyd1c2VyX2lkJ10gPSAkZGJEYXRhWyd1c2VyX2lkJ107CgkJaGVhZGVyKCdMb2NhdGlvbjogL2luZGV4LnBocCcpOwoJfQoKfQoKaW5jbHVkZSAoJ2xvZ2luLmh0bWwnKTsKCj8+