PHP, login script

if (($_GET['action'] == "logout") && ($_SESSION['logged_in'] == "yes")) {
  //avregistrera session mm.
}
elseif ($_SESSION['logged_in'] == "yes") {
  //inställningar man vill ha eller något..
}
elseif (($_POST['login'] == "yes") && ($_SESSION['logged_in'] != "yes")) {
  //verifiera användare, registrera session
}
else {
  //ej inloggad
}

<?php
    // dit man kommer om inloggning lyckas
  $goodlogin = "http://www.plats.com/goodlogin/";
 
$db = mysql_connect("localhost", "ruser", "*****");
mysql_select_db("base", $db);
 
$uid = $tangologin;
 // om en session finns registrerad, kolla om den är aktiv.
if ($uid <> "") {
 
  $sqlstring = "select count(loginuid) from sessions where loginuid = '$uid'";
   $resul = mysql_query($sqlstring) or die(mysql_error());
   $go = mysql_fetch_array($resul);
   if ($go[0] == 0) $dologin = true;
 
} else $dologin = true;
 
//echo $dologin;
 
if (!$dologin) header("Location: $goodlogin");
 
 
  if (isset($login) && isset($pass)) {
 
     $db = mysql_connect("localhost", "user", "****");
     mysql_select_db("base", $db) or die(mysql_error());
 
 
     $sql = "select * from users where login = '$login'";
     $res = mysql_query($sql) or die(mysql_error());
 
     $user = mysql_fetch_array($res);
 
        // kolla om anävndarnamnet finns
     if ($user[0] == "") regfail("Du angav fel användarnamn eller lösenord! (fel #1)", $REMOTE_ADDR,  $login, $pass);
 
        // kolla om lösenordet är rätt
     if ($user[1] <> md5($pass)) regfail("Du angav fel användarnamn eller lösenord! (fel #2)", $REMOTE_ADDR, $login, $pass);
 
        // allt verkar vara i sin ordning, logga in användaren.
 
      /* generera ett unikt ident */
     $cookieuid = genuid();
 
     /* sätt en kaka för att identifiera */
     setcookie("tangologin", $cookieuid) or die("Unable to set cookie! Login failed.");
 
     // ta bort tidigare logins
     $sql = "delete from sessions where `userid` = '$user[5]'";
     mysql_query($sql) or die("Unable to delete old sessions! (" . mysql_error() .")");
 
     // lägg in en ny session.
     $sql = "insert into sessions values('$cookieuid', '$user[5]', '" . date("Y-m-d") . "', '" . date("H:i:s") . "')";
     mysql_query($sql) or die("Unable to set login information! Login failed. (" . mysql_error() . ")");
 
     // uppdatera senaste ip och senaste logindatum
     $sql = "update users set lastaddr = '$REMOTE_ADDR', lastvisit = '". date("Y-m-d") ."' where uid = '$user[5]'";
     mysql_query($sql) or die("Unable to set login information!");
 
     // sänd iväg personen till förstasidan
     header("Location: $goodlogin");
 
  }

function genuid() {
 
 
   $seed1 = rand(100000, 9999999);
   $seed2 = rand(100000, 9999999);
   $seed3 = rand(100000, 9999999);
   $seed4 = rand(100000, 9999999);
   $seed5 = rand(100000, 9999999);
 
   $final = $seed1 . $seed2 . $seed3 . $seed4 . $seed5;
 
   $uid = md5($final);
 
   return $uid;
 
 
}
 
function regfail($message, $addr, $login, $pass) {
 
   $sql = "insert into failed_logins values('$addr', '". date("Y-m-d") ."', '". date("H:i:s") ."', '$login', '$pass')";
   mysql_query($sql) or die(mysql_error());
   die($message);
 
}
 
 ?>

 
  <form method="post">
  <center>
  <input type="text" name="login" value=""><br>
  <input type="password" name="pass" value=""><br>
  <input type="submit" name="Submit" value="Login!">
  </center>
  </form>
<!-- all failed logins are logged with ip, time, date, login and password. -->

$db = mysql_connect("localhost", "user", "****");
 mysql_select_db("base", $db);
$uid = $tangologin;
$sql = "select count(loginuid), userid from sessions where loginuid = '$uid' group by userid";
$res = mysql_query($sql);
$k = mysql_fetch_array($res);
if ($k[0] == 0) die("Du är inte inloggad!");
$sql = "select * from users where uid = '$k[1]'";
$res = mysql_query($sql) or die(mysql_error());
$user = mysql_fetch_array($res);
$PHP_AUTH_USER = $user[0];
mysql_close($db);

failed_logins
address		varchar 16
date		date
time		time
username	varchar 32
password	varchar 32

users
login 		varchar 25
pass		varchar 32
name		varchar 128
lastaddr	varchar 16
lastvisit	date
uid		varchar 32

sessions
loginuid	varchar 32
userid		varchar 32
login_date	date
login_time	time

<?php
 
 
 
  if (isset($name) && isset($login) && isset($pass1) && isset($pass2) && isset($submit)) {
 
 
     if ($pass1 <> $pass2) die("passwords do not match!");
 
     $db = mysql_connect("localhost", "root", "*****");
     mysql_select_db("base", $db);
 
     $uid = genuid();
     $cryptpass = md5($pass1);
     $sql = "insert into users values('$login', '$cryptpass', '$name', '', '', '$uid')";
     mysql_query($sql) or die(mysql_error());
 
 
  }
 
 
function genuid() {
 
 
      $seed1 = rand(100000, 9999999);
      $seed2 = rand(100000, 9999999);
      $seed3 = rand(100000, 9999999);
      $seed4 = rand(100000, 9999999);
      $seed5 = rand(100000, 9999999);
 
      $final = $seed1 . $seed2 . $seed3 . $seed4 . $seed5 . date("Y-m-d H:i:s");
 
      $uid = md5($final);
 
      return $uid;
 
 
}
 
 
?>
 
<form>
Name: <input type="text" name="name" value=""><br>
Login: <input type="text" name="login" value=""><br>
Password: <input type="password" name="pass1"><br>
Password: (conirm) <input type="password" name="pass2"><br>
<br>
<input type="submit" name="submit" value="skapa användare">
</form>

<?PHP
//Login_logout.php
if(isset($_POST[logout])){
	session_unset();
	echo "Sådärja, Nu har du loggat ut dude.
	<meta http-equiv=\"Refresh\" content=\"3;\">";
}

elseif(isset($_POST[pass])){
	if($_POST[pass] == "Lösenordet"){
		$_SESSION[admin] = "Admin_namnet";
		echo("Grattis $_SESSION[admin], Du har loggat in!
		<meta http-equiv=\"Refresh\" content=\"3;\">");
	}
	
	else{
		echo "Fel lösenord. Men du, skön kuk.
		<meta http-equiv=\"Refresh\" content=\"3;\">";
	}
}

elseif(isset($_SESSION[admin])){
	echo("Du är inloggad som $_SESSION[admin].");}

else{
	echo("Du är inte inloggad!");
}


?>	
<br>
<br>
	<form action="" method="post"> 
	<table border="0">
		<tr>
			<td width="30%">Lösenord:</td>
			<td width="70%"><input  type="password" name="pass"></td>
		</tr>
		<tr>
			<td width="30%">Logga ut:</td>
			<td width="70%"><INPUT TYPE="checkbox" name="logout"></td>
		</tr>
	</table>
	<input type=submit value="Skicka">
	</form>

//Denna kod ligger på alla sidor du vill skydda:
<?PHP
if(isset($_SESSION[admin])){
#Vad sidan innehåller
}
else{
	echo("Sorry dude, men du måste logga in innan du kan använda denna funktion");}
?>

AuthName "Restricted admin area"
AuthType Basic
AuthUserFile /path/to/passwordfile

require valid-user

<?php

$db = mysql_connect("localhost", "xxxx", "xxxx");
 mysql_select_db("fssplogin", $db);
$uid = $tangologin;
$sql = "select count(loginuid), userid from sessions where loginuid = '$uid' group by userid";
$res = mysql_query($sql);
$k = mysql_fetch_array($res);
if ($k[0] == 0) die("Du är inte inloggad");
$sql = "select * from users where uid = '$k[1]'";
$res = mysql_query($sql) or die(mysql_error());
$user = mysql_fetch_array($res);
$PHP_AUTH_USER = $user[0];
mysql_close($db);


echo "<html>";
echo "<title>Falu SS vattenpolo</title>";
echo "<head>";
echo "</head>";
echo "<body bgcolor='#ffffff' topmargin='100'>";
echo "<table border='0' width='100%'>";
echo "<tr>";
echo "<td align='right'><font face='verdna,arial' size='2'>text</font>";
echo "</tdtr>";
echo "</tr>";
echo "<tr>";
echo "<td width='100%' colspan='3' align='center'>";
echo "<font face='verdana,arial' size='5'><b>Välkommen till Falu SS Vattenpolo</b></font>";
echo "<br><br>";


echo "<br><br><br>";

echo "<img src='bilder/framsida.jpg' border='0'></center>";
echo "</td>";
echo "</tr>";
echo "</table>";
echo "</body>";
echo "</html>";


?>