форум вебмастероff на AlfaSpace.NET

 
include("connect.php"); 

$login = $_POST['login']; 
$password = md5($_POST['password']); 

$query = mysql_query("select * from users where login='$login' and password='$pa 
ssword'"); 
$query_num = mysql_num_rows($query); 

if($query_num == 0){ 
    echo "<center>Incorrect login or password!</center>"; 
}else{ 
    echo "<center>Welcome $login</center>"; 
} 

 
include("connect.php"); 

$login = $_POST['login']; 
$password = md5($_POST['password']); 

$query = mysql_query("select * from users where login='$login' and password='$pa 
ssword'"); 
$query_num = mysql_num_rows($query); 
$row = mysql_fetch_assoc($query); 

if($query_num == 1 && $login == $row['login']){ 
    echo "<center>Welcome $login</center>"; 
}else{ 
    echo "<center>Incorrect login or password!</center>"; 
} 

...$login = $_POST['login'];...

...$query = mysql_query("select * from users where login='$login' and pa 
ssword='$pa ssword'");...