[ ST-Event System]
คณะวิทยาศาสตร์
มหาวิทยาลัยนเรศวร
Not Found !!! "; }
else {
$_SESSION["SesUser"] = $objResult["st_id"];
header("Location: indexuser.php");
}
}elseif($_POST["chkUserGroup"] == "2"){
//Admin
if($_POST["txtUser"] != "")
{
// Search By user_ID *** escape ***
//echo "Admin";
$_POST['txtUser'] = mysqli_real_escape_string($objConnect, $_POST['txtUser']);
$_POST['txtPassword'] = mysqli_real_escape_string($objConnect, $_POST['txtPassword']);
$strSQL = "SELECT * FROM users where (users.user_id ='".$_POST["txtUser"]."') and (users.user_pwd ='".$_POST["txtPassword"]."')";
$objQuery = mysqli_query($objConnect, $strSQL) or die ("Error Query [".$strSQL."]");
$objResult = mysqli_fetch_array($objQuery);
if(empty($objResult["user_id"]))
{ echo "
Not Found !!! "; }
else {
$_SESSION["usergrp_id"] = $objResult["usergrp_id"];
$_SESSION["SesUser_id"] = $objResult["user_id"];
header("Location: eventlist.php");
}
}}
mysqli_close($objConnect);
?>