session / login

0. config.php

 

<? 
 // DB 접속
 $connect = @mysql_connect ("localhost", "epax", "hook1107");
 @mysql_select_db ("epax", $connect) || die("데이터베이스 연결에 실패하였습니다.");

 

    // 페이지 이동 함수
    function move_page($url)
    {
          echo "<meta http-equiv='refresh' content='0; url=$url'>";
          exit;
    }

    // 에러 메세지 출력함수
    function error($msg)
    {
          echo "
                <script>
                  alert('$msg');
                  history.back(-1);
                </script>
               ";
       exit;
    }
?>

 

1. adm_chk.php

 

<?
 session_start();
 include("$DOCUMENT_ROOT/class/config.php"); 
?>

<?  
    $query  = "select * from adm_member where adm_id='$adm_id' ";
    $result = mysql_query($query, $connect);
    $data   = mysql_fetch_array($result);

    if($data[status] > 1) error('정지중이거나 퇴사자입니다'); // 
    if($data[adm_grade]> 02 ) error('관리자가 아닙니다');
    if(!$data[adm_id]) error('아이디를 확인하세요');
    if($data[adm_pw]!=$adm_pw) error('관리자 비밀번호가 틀립니다');

      $_SESSION["p_id"]    = $data[adm_id];
      $_SESSION["p_name"]  = $data[adm_name];
      $_SESSION["p_grade"] = $data[adm_grade];
      $_SESSION["p_title"] = $data[adm_title];

 

    move_page('main.html');
    mysql_close($connect);

?>

 

2. adm_session.php

 

(?
    session_start();
    if(!isset($_SESSION["p_id"])||!isset($_SESSION["p_name"])){
     print("
    <SCRIPT>
    top.location.href='/admin/'
   </SCRIPT>   
     ");
     exit();
 
    }

?>

 

3. index.hrml

 

<?
 if(!$_SESSION["p_id"]){
?>

    (form method="post" name="frmAdminLogin" action="adm_chk.php">

      (input type="text" name="adm_id" size="19" maxlength="30" class=txt>

      (input type="password" name="adm_pw" size="19" maxlength="30" class=txt>

    (/form>

<?}?>

<?
 //로긴 상태일 때는 main.html 로 이동
 if($_SESSION["p_id"]){
    move_page('/admin/main.html');
 }
?>

 

4. main.hrml

 

   (a href="logout.php" target="pokpo_main">로그아웃(/a>

 

5 log_out.php

 

<?
 session_start();  

 include("$DOCUMENT_ROOT/class/config.php");

 session_destroy();

    move_page('index.html');
 mysql_close('$connect');
?>