index.php
---------------------------------------
<html>
<head>
<title></title>
</head>
<body>
<table align=center border=1 width=100% cellspacing=1 cellpadding=0>
<form action="login.php" method=post>
<tr >
<td align=right>
<font size="2">Логин: <input type="text" name="login">
</td>
</tr>
<tr>
<td align=right>
<font size="2">Пароль: <input type="password" name="password">
</td>
</tr>
<tr>
<td align=right>
<font size="2"><a href="register.php">Регистрация</a> </font>
<input type="submit" value="Войти"><br>
</td>
</tr>
<table>
</form>
</body>
-----------------------------------------------------
login.php
-----------------------------------------------------
<?php
session_start ();
$_SESSION["login"] =$_REQUEST["login"];
?>
<html>
<head>
<title></title>
</head>
<body>
<?php
include ("connection.php");
$login1 = htmlspecialchars($_POST["login"], ENT_QUOTES);
$password1 = htmlspecialchars($_POST["password"], ENT_QUOTES);
$test = mssql_query ("select * from users where LogUser='$login1' and PassUser='$password1'", $connection) ;
if (!$test)
{
echo mssql_error() . "<br>";
exit();
}
if(mssql_num_rows($test)>0)
{
echo "Привет!" . " " . "$login1" . "<br>";
echo "<a href='user_edit.php?<?php echo(SID); ?>'>Изменить данные!</a>" ;
}
else
{
echo "Неправельно ведён логин или пароль!" . "<br>";
echo "<META HTTP-EQUIV='REFRESH' CONTENT='3; URL=index.php'>";
}
?>
</body>
</html>
----------------------------------------------------
connection.php
----------------------------------------------------
<html>
<head>
<title></title>
</head>
<body>
<?php
$servername = "SERVER\SERVERSQL";
$dbname = "NirAdpSQL";
$user = "adminsql";
$pass = "1";
$connection = @mssql_connect($servername, $user, $pass);
if (!$connection)
{
echo mssql_error() . "<br>" ;
exit();
}
else echo "подключились к серверу <br>";
$db = @mssql_select_db($dbname, $connection);
if (!$db)
{
echo mssql_error() . "<br>" ;
exit();
}
# else echo "подключились к базе <br>";
$query = @mssql_query("select * from Users", $connection);
if (!$query)
{
echo mssql_error() . "<br>" ;
exit() ;
}
# else echo "подключили запрос <br>";
$row = mssql_fetch_object($query);
if (!$row)
{
echo mssql_error() . "<br>";
exit();
}
else echo "подключили объект <br>";
?>
</form>
</body>
</html>
-------------------------------------------------
user_edit.php
--------------------------------------------------
<?
session_start();
?>
<html>
<head>
<title></title>
</head>
<body>
<table border=1>
<tr>
<td>
<div align="right">
<?php
include ("connection.php") ;
$result = mssql_query("select * from Users where LogUser='$_SESSION[login]'", $connection);
$row = mssql_fetch_object($result);
echo "<form action='user_new_edit.php' method=post>";
echo "<input type='hidden' name='user_id' value='$row->IdUser'>";
echo "Логин:" . "<input type='text' name='user_login' value='$row->LogUser'>" . "<br>";
echo "Пароль:" . "<input type='edit' name='user_password' value='$row->PassUser'>" . "<br>";
echo "Фамилия:" . "<input type='edit' name='user_fam' value='$row->FamUser'>" . "<br>";
echo "Имя:" . "<input type='edit' name='user_name' value='$row->NamUser'>" . "<br>";
echo "Отчество:" . "<input type='edit' name='user_otc' value='$row->OtcUser'>" . "<br>";
echo "Кафедра:" . "<input type='edit' name='user_kafedra' value='$row->KafedraUser'>" . "<br>";
echo "Телефон:" . "<input type='edit' name='user_phone' value='$row->PhoneUser'>" . "<br>";
echo "<input type='submit' value='Сохранить!'></form>";
?>
</div>
</td>
</tr>
</body>
</html>
----------------------------------------------------
user_new_edit.php
-----------------------------------------------------
<html>
<head>
<title></title>
</head>
<body>
<?php
include ("connection.php");
#$login1 = htmlspecialchars($_REQUEST["user_login"], ENT_QUOTES);
#$password1 = htmlspecialchars($_REQUEST["user_password"], ENT_QUOTES);
#$name1 = htmlspecialchars($_REQUEST["user_name"], ENT_QUOTES);
#$fam1 = htmlspecialchars($_REQUEST["user_fam"], ENT_QUOTES);
#$otc1 = htmlspecialchars($_REQUEST["user_otc"], ENT_QUOTES);
#$kafedra1 = htmlspecialchars($_REQUEST["user_kafedra"], ENT_QUOTES);
#$phone1 = htmlspecialchars($_REQUEST["user_phone"], ENT_QUOTES);
$login1 = htmlspecialchars($_POST["user_login"], ENT_QUOTES);
$password1 = htmlspecialchars($_POST["user_password"], ENT_QUOTES);
$name1 = htmlspecialchars($_POST["user_name"], ENT_QUOTES);
$fam1 = htmlspecialchars($_POST["user_fam"], ENT_QUOTES);
$otc1 = htmlspecialchars($_POST["user_otc"], ENT_QUOTES);
$kafedra1 = htmlspecialchars($_POST["user_kafedra"], ENT_QUOTES);
$phone1 = htmlspecialchars($_POST["user_phone"], ENT_QUOTES);
$result = mssql_query("select * from Users where IdUser = $_POST[user_id]", $connection);
#if ($result)
#{
# echo "есть соединение <br>" ;
#}
$row = mssql_fetch_object($result);
#if ($row)
#{
# echo "есть объект <br>" ;
#}
$test = mssql_query ("select * from Users where LogUser='$login1' and IdUser!=$_POST[user_id]", $connection) ;
while ( $c = mssql_fetch_row( $test ))
{
echo "$c[0]<br>$c[2]<br>$c[3]<br>";
}
if(mssql_num_rows($test)>0)
{
echo "<br>Такой юзер уже существует!" . "<br>";
echo "<a href='user_edit.php'>Назад</a>";
}
else
{
$query = mssql_query ("update Users set LogUser='".$login1."', PassUser='".$password1."', NamUser='".$name1."', FamUser='".$fam1."', OtcUser='".$otc1."', KafedraUser='".$kafedra1."', PhoneUser='".$phone1."' where IdUser=$row->IdUser", $connection) ;
{
echo "Юзер изменён!!" . "<br>";
echo "<a href='index.php'>Перейти на главную!</a>";
}
}
mssql($query);
?>
</body>
</html>
Поправь меня если что не так плиз
