<?
include("db.php");
if (isset($_POST['login']))
{
if (strlen($_POST['login']) > 4)
{
$login = htmlspecialchars(mysql_escape_string($_POST['login']));
$password = htmlspecialchars(mysql_escape_string($_POST['password']));
$result = mysql_query("SELECT login,password FROM admin WHERE login='$login'");
$result = mysql_fetch_array($result);
if ($result['password'] == $password) 
{
$session = md5($login."sdsdsadasdsadas");
setcookie("SESSION",$session); 
$ip = getenv("REMOTE_ADDR"); 
mysql_query("INSERT INTO admin (session,ip) VALUES ('$session','$ip') WHERE login='$login'"); 
} esle {echo("Пароль не верен!");}
} esle {echo("Логин кароткий!");}
} esle {echo("404 Not Found");}
if (strlen($_COOKIE['SESSION']) = 32) 
{
$session = htmlspecialchars(mysql_escape_string($_COOKIE['SESSION']));
$result = mysql_query("SELECT session,ip FROM admin WHERE session='$session'");
$result = mysql_fetch_array($result);
$ip = getenv("REMOTE_ADDR");
if ($result['session'] == $session)
{
if ($result['ip'] == $ip)
{
echo("123123");
} 
esle 
{
 mysql_query("UPDATE admin SET session=" WHERE session='$session');
echo("404 Not Found"); 
}
} esle {echo("404 Not Found");}
} esle {echo("404 Not Found");}
?>

<form method="post" action="" onSubmit="return CheckForm(this);">
<input name="login"  size="20" value="" style="width: 403px" ></br>
<input name="password"  size="20" value="" style="width: 403px" ></br>
<input type="Submit"  value="ОК" style="margin-top:4px; width: 61px;"></form>