HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/www/archive/waldron1/login.php
<?
session_start();
if ($username && $password) {
   $db = odbc_connect("DB5338A", "5338", "miff0609");
   $rsx = odbc_exec($db, "SELECT * FROM tblLogin WHERE Username = '$username' AND Password = '$password'");

   if (odbc_num_rows($rsx) > 0)
   {
      // User is a valid WIMS Client
      $client_id = (odbc_result($rsx, "ClientID"));
      session_register("client_id");
   }
}

//print header
$page_name = "client";
require("header.php");
?>

<td valign="top" class="text">
<center><P>
<? 

  if (session_is_registered("client_id"))
  {
    echo "You are logged in as client: $client_id <br>";
    echo "<a href=\"logout.php\">Log out</a><br>";
  }
  else
  {
    if (isset($username))
    {
      // if they've tried and failed to log in
      echo "Could not log you in";
    }
    else 
    {
      // they have not tried to log in yet or have logged out
      echo "You are not logged in.<br>";
    }

    // provide form to log in 
    echo "<form method=post action=\"login.php\">";
    echo "<table>";
    echo "<tr><td>Userid:</td>";
    echo "<td><input type=text name=username></td></tr>";
    echo "<tr><td>Password:</td>";
    echo "<td><input type=password name=password></td></tr>";
    echo "<tr><td colspan=2 align=center>";
    echo "<input type=submit value=\"Log in\"></td></tr>";
    echo "</table></form>";
  }
?>

</center>
</td>

<?
$right_nav = array("forgot", "help");
require("footer.php");
?>