İNDEX.php (Giriş Formu Sayfası)
<form action="giris-yap.php" name="giriss" id="giriss" onsubmit="return false;" method="POST"/>
<table id="Tablo_01" width="399" height="243" border="0" cellpadding="0" cellspacing="0">
<tr>
<td height="33" colspan="3" background="images/dermotek_01.png"><img src="images/content_header.png" width="129" height="21" class="resimhizala" /></td>
</tr>
<tr>
<td rowspan="2"><img src="images/dermotek_02.png" width="25" height="210" alt="" /></td>
<td height="179" background="images/dermotek_03.png"><table width="341" height="125" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td width="22" height="38" class="buyuktext"></td>
<td width="110" height="38"><span class="buyuktext">Kullanıcı adı : </span></td>
<td height="40" colspan="2"><input name="kadi" id="kadi" type="text" class="buyukinput" maxlength="25" /></td>
</tr>
<tr>
<td height="27" class="buyuktext"></td>
<td><span class="buyuktext">Parola : </span></td>
<td height="40" colspan="2"><input name="sifre" id="sifre" type="password" class="buyukinput" maxlength="25" /></td>
</tr>
<tr>
<td rowspan="2" class="buyuktext"></td>
<td><span class="buyuktext"><b>
<?php
$int1 = rand(1,9);
$int2 = rand(1,9);
$toplam = $int1 + $int2;
echo $int1 . ' + ' . $int2 . ' = ?';
$_SESSION['guvenlik'] = $toplam;
?>
</b></span></td>
<td width="100" height="40"><input name="guvenlik" id="guvenlik" type="text" class="buyukinput" size="10"/></td>
<td width="109"> </td>
</tr>
<tr>
<td></td>
<td height="40" colspan="2"><input name="Submit" type="submit" class="buyukinput" value="Giriş Yap" onclick="kontrol();"/></td>
</tr>
</table></td>
<td rowspan="2"><img src="images/dermotek_04.png" width="25" height="210" alt="" /></td>
</tr>
<tr>
<td><img src="images/dermotek_05.png" width="349" height="31" alt="" /></td>
</tr>
</table>
</form>UYE-GIRIS.php (Giriş işlemlerinin gerçekleştirildiği dosya)<?php
session_start();
ob_start();
include "db.php";
if($_SESSION['guvenlik']==$guvenlik)
{
$kadi =strip_tags(mysql_real_escape_string($_POST['kadi']));
$sifre =strip_tags(mysql_real_escape_string($_POST['sifre']));
$sifre =MD5($sifre);
$sordum=mysql_query("SELECT * FROM admin WHERE kadi='".$kadi."' AND sifre='".$sifre."'");
$kontrol=mysql_num_rows($sordum);
if($kontrol==0)
{
echo "<script>alert('Üyelik bilgileriniz bulunamadi!, Lutfen tekrar deneyin!');</script>";
Header ('Refresh:1; url=index.php');
}else{
$cevapladim = mysql_fetch_assoc($sordum);
$_SESSION['YONETAD'] = $cevapladim['kadi'];
$_SESSION['YONETPW'] = $cevapladim['sifre'];
Header ('Refresh:1; url=ik.php');
}
}else{
echo "Hata :".mysql_error();
}
ob_end_flush();
?>