ACC SHELL

<?php
/*
prihlasehni do systemu a zalozeni session
*/
include("connectdb.php");

$password=$_POST['passw'];
$login=$_POST['log'];
//$query="select * from users where passw='$password' AND login='$login'";
$query="select * from employee where passw='$password' AND login='$login'";
$result=mysql_query($query)
       or die("Požadované data nelze nalézt");
$con=mysql_num_rows($result);
if($con == '1' && (!isset($_SESSION['login']))){
//$query="SELECT * FROM users WHERE login='$login' AND passw = '$password'";
$query="select * from employee where passw='$password' AND login='$login'";
$result=mysql_query($query);
$rows = mysql_fetch_array($result);
$datum = StrFTime("%Y-%m-%d", Time());
// zacatek sezeni ulozeni dulezitych dat
if($rows['uright']==1 OR $rows['uright']==2){
session_start();          
     $_SESSION['user_is_logged'] = true;
     $_SESSION['login'] = $login;
     $_SESSION['passw'] = $password;
     $_SESSION['ide'] = $rows['ide'];
     $_SESSION['date'] = $datum;
     $_SESSION['fname'] = $rows['fname'];
     $_SESSION['sname'] = $rows['sname'];
     $_SESSION['uright'] = $rows['uright'];
     $_SESSION['email'] = $rows['email'];
     $_SESSION['r']='1';
     $_SESSION['d']='1';
     $_SESSION['a']='1';
     
mysql_close();
}
}

if(isset($_SESSION[user_is_logged])){Header("location: http://$webl/intranet/intranet.php?er=0");}else{Header("location: http://$webl/intranet/intrlog.php?er=1");}

?>