<?php
session_name("testsession");
session_start();
$cnt = mysqli_connect("Host", "user", "password","datenbank");
function esc($cnt, $wert){
return mysqli_real_escape_string($cnt, $wert);
}
if(isset($_POST['login']) && !empty($_POST['uname']) && !empty($_POST['upw'])){
$sqlCmd = mysqli_query($cnt, "SELECT username FROM table.table WHERE username = '".esc($cnt, $_POST['uname'])."' AND user_password = '".esc($cnt, $_POST['upw'])."' LIMIT 1");
if(mysqli_num_rows($sqlCmd)==1){
$login = mysqli_fetch_object($sqlCmd);
$_SESSION['username'] = $login->username;
}
}
?>
<?php if(!isset($_SESSION['username'])){ ?>
<form method="post" action="">
<input type="test" name="uname" placeholder="Username"><br>
<input type="password" name="upw" placeholder="password"><br>
<input type="submit" name="login" value="Login">
</form>
<?php } else { ?>
Glückwunsch, du bist eingeloggt.
<?php ;} ?>
