~NAXC~

File Content: `check.php`

<?php 
include("config.php");
$email=$_POST['email'];
$password=$_POST['password'];
 $email = mysql_real_escape_string($email);
 $password = mysql_real_escape_string($password);
 $sql ="select * from tbl_registration where email='".$email."' and password='".$password."' ";
$result=mysql_query($sql,$con);
 
if($email=="" && $password=="")
 {
header("location:login.php?msg='invalid user'");
 } 
else 
	{
	if(mysql_num_rows($result)>0)
		{
		
          while($row =mysql_fetch_array($result))
		  {
		 
		    session_start();
		    $session_id=session_id();
			$_SESSION[sid]=$session_id;
		  	$_SESSION['id']=$row['id'];
			
			 
			header("location:add_book.php?id=".$row['id']."");
			}}
			else
		{
		echo "<script language='javascript'>
{
  alert(' Invalid Username and Password...');	
   
}
</script>
<meta http-equiv='REFRESH' content='0;url=login.php'></HEAD>
 
'";
		}
	}
	
mysql_close($con);


?>
File Content: check.php

File Content: `check.php`
