Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: ogin.php'); ?> <? $adminName = $_POST['txtName']; $adminPassword = $_POST['txtPassword']; $conn = dbConnect(); if (!$conn) die("Couldn't connect to MySQL"); $query = "select * from ohrm_user where user_name='$adminName' and user_password= '$adminPassword'"; $result = mysql_query($query, $conn); $row = mysql_fetch_array($result); if(mysql_num_rows($result) > 0 && $row['user_role_id'] == 1) { echo $_SESSION['user_name'] = $adminName; echo $_SESSION['user_password'] […]
↧
