1: 
2: 
3: 
4: 
5: 
6: 
7: 
8: 
9: 
10: 
11: 
12: 
13: 
14: 
15: 
16: 
17: 
18: 
19: 
20: 
21: 
22: 
23: 
24: 
25: 
26: 
27: 
28: 
29: 
30: 
31: 
32: 
33: 
34: 
35: 
36: 
37: 
38: 
39: 
40: 
41: 
42: 
43: 
44: 
45: 
46: 
47: 
48: 
49: 
50: 
51: 
52: 
53: 
54: 
55: 
56: 
57: 
58: 
59: 
60: 
61: 
62: 
63: 
64: 
65: 
66: 
67: 
68: 
69: 
70: 
71: 
72: 
73: 
74: 
75: 
76: 
77: 
78: 
79: 
80: 
81: 
82: 
83: 
84: 
85: 
86: 
87: 
88: 
89: 
90:

session_start() ;

$connect = mysql_connect($db["host"], $db["user"], $db["passwort"]);

if (isset($sent))
 {
  if ($sent==1)
    {

          $sql="SELECT user, passwort FROM insolvenz WHERE user='$userid'"      ;
          mysql_select_db($db["database"], $connect);
          $result=mysql_query($sql, $connect)         ;
          if (mysql_num_rows($result)>=1)
              {
               $ergebnis=mysql_fetch_array($result) ;

                if ($ergebnis["passwort"]==$kwort AND $ergebnis["user"]==$userid)
                   {
                    $login="1";
                    session_register("login","userid");
                    include("_header.php");
                    echo "Hallo, Ihre session ID ist ".SID." Login=$login, $userid!<br>";
                    echo "<a href=\"./index.php\">Weiter</a>";
                    include("_footer.php");
                   }


                elseif ($ergebnis["passwort"]!=$kwort)
                    {
                     $login="2";
                     unset($sent);
                            if(isset($versuche))
                             {
                               $versuche=$versuche+1 ;

                                if($versuche==3)
                                    {
                                     $sql_eintrag="INSERT INTO login (ip, triedid, tries) VALUES ('$REMOTE_ADDR', '$userid', '$versuche')";
                                     mysql_select_db($db["database"], $connect);
                                     mysql_query("$sql_eintrag", $connect);

                                     $auslesen=mysql_query("SELECT ip, triedid, tries FROM login", $connect);
                                     $result=mysql_fetch_assoc($auslesen);
                                     include("_header.php");
                                     foreach($result as $feld) {
                                     echo "$feld <br>" ;}
                                     echo "Falsches PW, $versuche Versuche";
                                     include("_footer.php");


                                    }
                               }
                            else
                             {

                               $versuche=1 ;
                               include("_header.php");
                               echo "Falsches PW, $versuche Versuche";
                               include("_footer.php");

                             }


                        session_register("versuche","login");


                    }
               }

            else
                    {
                    $login="3";
                    unset($sent);
                    include("_header.php");
                    echo "Benutzer unbekannt";
                    include("_footer.php");
                    }


    }
 }
  if ($logout==1)
    {
      session_unregister("login");
      session_unregister("userid");
      unset($login);
      include("_header.php");
      echo "Erfolgreich ausgeloggt!";
      include("_footer.php");
    }

1: 
2: 
3: 
4: 
5: 
6: 
7: 
8: 
9: 
10: 
11: 
12: 
13: 
14: 
15: 
16: 
17: 
18: 
19: 
20: 
21: 
22: 
23: 
24: 
25: 
26: 
27: 
28: 
29: 
30: 
31: 
32: 
33: 
34: 
35: 
36: 
37: 
38: 
39: 
40: 
41: 
42: 
43: 
44: 
45: 
46: 
47: 
48: 
49: 
50:

          <?

              if (isset($login))
               {
                if ($login=="1")
                     {
                      echo "<p>";
                      echo "<b id=\"xx-small\">Eingeloggt für Fall Nr. ".$userid.". </b><br>";
                      echo "<b id=\"xx-small\"><a href=\"./login.php?logout=1\">Logout</a></p>"   ;
                      }
                else
                      {
          ?>
                        <form action="login.php" method="POST"> <input type="hidden" name="sent" value="1">
                                       <table cellspacing="2" cellpadding="0" border="0" id="xx-small">
                                           <tr>
                                            <td>Verwaltungsnr. </td>
                                            <td><input type="Text" name="userid" value="" size="5" maxlength="20"> </td>
                                           </tr>
                                           <tr>
                                             <td>Kennwort </td>
                                             <td><input type="Password" name="kwort" value="" size="5" maxlength="20"> </td>
                                            </tr>
                                            <tr>
                                             <td><input type="Submit" name="" value="Senden"> </td>
                                             <td><input type="reset" value="reset"> </td>
                                            </tr>
                                        </table>
                       </form>
          <?           }
              }
              else
                      { ?>
                                    <form action="login.php" method="POST"> <input type="hidden" name="sent" value="1">
                                     <table cellspacing="2" cellpadding="0" border="0" id="xx-small">
                                      <tr>
                                       <td>Verwaltungsnr. </td>
                                       <td><input type="Text" name="userid" value="" size="5" maxlength="20"> </td>
                                      </tr>
                                      <tr>
                                       <td>Kennwort </td>
                                       <td><input type="Password" name="kwort" value="" size="5" maxlength="20"> </td>
                                      </tr>
                                      <tr>
                                       <td><input type="Submit" name="" value="Senden"> </td>
                                       <td><input type="reset" value="reset"> </td>
                </tr>
               </table>
              </form>
                     <? } ?>