Forum PHP.pl

<?php include 'header.php'; ?>
<?php
if($_SESSION['logged']==0)
{
    if(isset($_POST['submitsignin']))
    {
    $_POST[passwordmd5] = md5($_POST[password]);
    $query_signin=mysql_query("SELECT id,username,klamm,admin,register_date,register_time,ban FROM users WHERE username='$_POST[username]' AND password='$_POST[passwordmd5]'") or die(mysql_error());
    $row_signin=mysql_fetch_array($query_signin);

        if($row_signin['ban'] = 1)
        {
        echo '<p class="error">Twoje konto jest zbanowane</p>';
        }
    if(mysql_num_rows($query_signin)>0)
    {
    $_SESSION['logged'] = 1;
    $_SESSION['userid'] = "$row_signin[id]";
    $_SESSION['username'] = "$row_signin[username]";
        $_SESSION['klamm'] = "$row_signin[klamm]";
    $_SESSION['admin'] = "$row_signin[admin]";
    echo '<p class="ok">Zalogowałe¶ się!</p><META HTTP-EQUIV=Refresh CONTENT="0; URL=index.php">';
    }
    else
    {
    echo '<p class="error">Zły login lub hasło!</p>';
    }
        }

?>
<form method="POST">
<table border="0">
<tr><td style="width: 125px";>Login:</td><td style="width: 150px";><input type="text" name="username" maxlength="255"></td></tr>
<tr><td>Hasło:</td><td><input type="password" name="password" maxlength="255"></td></tr>
<tr><td></td><td><input type="submit" name="submitsignin" value="Zaloguj się!"></td></tr>
</table>
</form>
<?php } ?>
<?php include 'footer.php'; ?>