giris.php
<?php
session_start(); ob_start();
include("db.php");
$uyeadi = $_POST["uyeadi"];
$sifre = $_POST["sifre"];
$sifre1 = md5($sifre);
$sor = mysql_query("Select * From uyeler Where uyeadi='".mysql_real_escape_string($uyeadi)."' and sifre='".mysql_real_escape_string($sifre1)."'");
if(mysql_num_rows($sor)>0){
while($yaz = mysql_fetch_array($sor)){
$id = $yaz["id"];
$_SESSION["uyeadi"] = $uyeadi;
$_SESSION["id"] = $id;
}
header("Location:index.php");
}else{
header("Location: girisyanlis.php");
}
?>