<?php if (isset($_POST['auth_name'])) {
$name=mysql_real_escape_string($_POST['auth_name']);
$pass=mysql_real_escape_string($_POST['auth_pass']);
$connect = mysql_connect("localhost", "beck", "553367");
$select = mysql_select_db("dannye", $connect);
$query = "SELECT * FROM smplusers WHERE user_name='$name' AND user_password='$pass'";
$res = mysql_query($query) or trigger_error(mysql_error().$query);
if ($row = mysql_fetch_assoc($res)) {
session_start();
$_SESSION['user_id'] = $row['id'];
$_SESSION['ip'] = $_SERVER['REMOTE_ADDR'];
}
header("Location: http://".$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);
exit;
}
if (isset($_GET['action']) AND $_GET['action']=="logout") {
session_start();
session_destroy();
header("Location: http://".$_SERVER['HTTP_HOST']."/");
exit;
}
if (isset($_REQUEST[session_name()])) session_start();
if (isset($_SESSION['user_id']) AND $_SESSION['ip'] == $_SERVER['REMOTE_ADDR']) return;
else {
?>
<form method="POST">
<input type="text" name="auth_name"><br>
<input type="password" name="auth_pass"><br>
<input type="submit"><br>
</form>
<? 
}
exit;
?>

<?
//Скрипт авторизации ред. 31.03.2014
if (isset($_POST['auth_name'])) { //Проверяем авторизацию
require_once "phpsqlajax_dbinfo.php";//Данные для подключение к БД
require_once "db.php"; //Проверяем подключение
require_once "createlog.php"; //Подготавливаем лог для записи
$name=mysql_escape_string($_POST['auth_name']);
$ip = GetRealIp(); //Берем IP юзера
//echo $ip;
save_log($ip."-".$name); //Пишем в лог ип и имя
$pass=mysql_escape_string($_POST['auth_pass']);
$hash=md5($pass);
$query = "SELECT * FROM `smplusers` WHERE `user_name`='$name' AND `user_password`='$hash' LIMIT 1" ;
$res = mysql_query($query) or trigger_error(mysql_error().$query);
if ($row = mysql_fetch_assoc($res)) {
session_start();
$_SESSION['authorized']="1";	
}
header("Location: admin/index.php"); //Переход на главную страницу
exit;
}

else {session_start();
session_destroy();
?>
<h3>Авторизация</h3>
<form method="POST">
<input type="text" name="auth_name"><br>
<input type="password" name="auth_pass"><br>
<input type="submit"><br>
</form>
<? 
}
exit;
?>