include("include/startup.php"); if(isset($_REQUEST['action']) && $_REQUEST['action']=='check_login'){ session_start(); $message = ""; $user_name = $_REQUEST['user_name']; $password = md5($_REQUEST['password']); $user_name = trim($_REQUEST['user_name']); //$password = md5($_REQUEST['password']); $password = trim($_REQUEST['password']); $sql_check = "SELECT * FROM `driver` WHERE `username` ='$user_name' and `password` = '$password' and org_id = '".$config->org_id."' and status=1 "; $rs = mysql_query($sql_check); if(isset($_REQUEST['org_id']) && ($_REQUEST['org_id'] == $config->org_id)){ if(mysql_num_rows($rs) > 0){ $_SESSION['front_end_login'] =true; $row_login = mysql_fetch_assoc($rs); $_SESSION['user_id'] = $row_login['id']; $_SESSION['username'] = $row_login['username']; header("Location: ".$config->siteURL); exit; }else{ $message = "Invalid login. Please try again"; } }else{ $message = "Please enter valid Organization Id"; } } ?>