File manager - Edit - /var/www/order.cmtc.ac.th/admin/index_1.php
Back
<?php session_start(); include('../config/db.php'); /* if(isset($_POST['username'])) { $u = $_POST['username']; $p = $_POST['password']; $res = $conn->query("SELECT * FROM admin WHERE username='$u' AND password='$p'"); if($res->num_rows > 0) { $_SESSION['admin'] = $u; header('Location: orders.php'); exit; } else { $error = "ชื่อผู้ใช้หรือรหัสผ่านไม่ถูกต้อง"; } } */ if(isset($_POST['username'])) { $u = $_POST['username']; $p = md5($_POST['password']); $res = $conn->query("SELECT * FROM users WHERE username='$u' AND password='$p'"); if($res->num_rows > 0){ $data = $res->fetch_assoc(); $_SESSION['admin'] = $data['username']; $_SESSION['admin_fullname'] = $data['fullname']; $_SESSION['admin_id'] = $data['id']; $_SESSION['admin_role'] = $data['role']; // ✅ เก็บระดับสิทธิ์ header("Location: orders.php"); exit; } else { echo "<script>alert('ชื่อผู้ใช้หรือรหัสผ่านไม่ถูกต้อง');history.back();</script>"; } } ?> <!DOCTYPE html> <html lang="th"> <head> <meta charset="UTF-8"> <title>เข้าสู่ระบบผู้ดูแล</title> <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet"> <link href="../assets/css/style.css" rel="stylesheet"> </head> <body class="bg-light"> <div class="container py-5"> <div class="row justify-content-center"> <div class="col-md-5"> <div class="card shadow-lg p-4"> <h4 class="text-center mb-4">เข้าสู่ระบบผู้ดูแล</h4> <?php if(isset($error)): ?> <div class="alert alert-danger text-center"><?= $error ?></div> <?php endif; ?> <form method="post"> <div class="mb-3"> <label>ชื่อผู้ใช้</label> <input type="text" name="username" class="form-control" required> </div> <div class="mb-3"> <label>รหัสผ่าน</label> <input type="password" name="password" class="form-control" required> </div> <button class="btn btn-primary w-100">เข้าสู่ระบบ</button> </form> </div> </div> </div> </div> </body> </html>
| ver. 1.4 |
Github
|
.
| PHP 7.4.33 | Generation time: 0.57 |
proxy
|
phpinfo
|
Settings