alert(".$s.");"; } $sUser = $_POST['username']; $sPass = $_POST['password']; $sSafePass = MD5($sPass); $GetSalt = "SELECT * FROM tUser WHERE Username = '$sUser'"; $Execute = Odbc_exec( $Con, $GetSalt ); while(odbc_fetch_row($Execute)) { $Salt = odbc_result($Execute, 'PasswordSalt'); } $UserLogin = "SELECT * FROM tUser WHERE Username = '$sUser' AND Password = '$sSafePass'"; $Execute1 = odbc_exec( $Con, $UserLogin ); if(!$Execute1) { error("Login"); return false; } $Fetch = odbc_num_rows($Execute1); if ($Fetch == 1) { session_start(); $_SESSION['login'] = "1"; } else { error ("Invalid Username/Password, Please try again."); } header ('Location: /Test/'); $_SESSION['user'] = $sUser; } ?>