la pag login fa questo:
<?php $LOGIN_INFORMATION = array(
'bravo' => 'bravo',
);
define('USE_USERNAME', true);
if(isset($_GET['code'])) {
die('<center><font face="Verdana" size="2">Include following code into every page you would like to protect, at the very beginning (first line):<br><br><strong><?php include("' . __FILE__ . '"); ?></strong></center></font>');
}
if(isset($_GET['logout'])) {
setcookie("verify", ''); // clear password;
die('<center><font face="Verdana" size="2">Logged out.</font></center>');
}
if(!function_exists('showLoginPasswordProtect')) {
function showLoginPasswordProtect($error_msg) {
?><!-- And this is the output -->
<style>
* {
font-family:Verdana;
font-size:12px;
}
a {
color: #000000;
text-decoration: none;
}
a:hover {
color: red;
text-decoration: none;
}
input {
border: 1px solid black;
background-color: #FFFFFF;
}
.bodyform {
border-color: #000000;
border-style:solid;
border-width: 3px;
}
.title {
color: #FFFFFF;
background: #000000;
padding: 5px;
}
</style>
<? echo'
<center><br /><br />
<div class="bodyform" align="center">
<form method="post">
<div class="title">
<strong>Access restricted - Login Below:</strong>
</div>
<div style="padding-right:10px;padding-left:10px;">
<font color="red"><strong>'.$error_msg.'<strong></font><br /><br />';
if (USE_USERNAME) echo '<table>
<tr>
<td align="left">Login:</td>
<td align="right"><input type="input" name="access_login" /></td>
</tr>
<tr>
<td>Password:</td>
<td><input type="password" name="access_password" /></td>
</tr>
</table>
<p></p>
<input type="submit" name="Submit" value="Submit" />
</form>
</div>
</div>
<br /> </center>';
die();
}
}
if (isset($_POST['access_password']))
{
$login = isset($_POST['access_login']) ? $_POST['access_login'] : '';
$pass = $_POST['access_password'];
if (!USE_USERNAME && !in_array($pass, $LOGIN_INFORMATION)
|| (USE_USERNAME && ( !array_key_exists($login, $LOGIN_INFORMATION) || $LOGIN_INFORMATION[$login] != $pass ) )
)
{
showLoginPasswordProtect("Incorrect password.");
}
else
{
setcookie("verify", md5($pass));
setcookie("cook", 111, time()+43200);
unset($_POST['access_login']);
unset($_POST['access_password']);
unset($_POST['Submit']);
}
}
else
{
if (!isset($_COOKIE['verify']))
{
showLoginPasswordProtect("");
}
$found = false;
foreach($LOGIN_INFORMATION as $kay=>$val)
{
if ($_COOKIE['verify'] == md5($val))
{
$found = true;
break;
}
if ($_COOKIE['cook'] == 111)
{
$found = true;
break;
}
}
if (!$found)
{
showLoginPasswordProtect("");
}
}
?>