First code received by Master Leon

verifLogin.php

@@ -0,0 +1,45 @@
+<?php
+session_start();
+$loginOK = false;
+
+mysql_connect("leon.redby.fr", "leon0", "7268032");
+mysql_select_db("leon0");
+
+if ( isset($_POST) && (!empty($_POST['login'])) && (!empty($_POST['password'])) ) {
+
+  extract($_POST);
+
+  $login = addslashes($_POST['login']);
+  $sql = "SELECT * FROM user WHERE pseudo = '".$login."'";
+  $req = mysql_query($sql) or die('Erreur SQL : <br />'.$sql);
+ 
+  if (mysql_num_rows($req) > 0) {
+     $data = mysql_fetch_assoc($req);
+   
+    $password = $_POST['password'];
+    if ($password == $data['mdp']) {
+      $loginOK = true;
+    }
+  }
+}
+
+if ($loginOK) {
+
+$_SESSION['id'] = $data['id'];
+
+$x = mysql_query("SELECT galaxy, ss ,pos FROM user WHERE id='".$data['id']."' AND nb=1 ");
+$donnees = mysql_fetch_array($x);
+$_SESSION['galaxy'] = $donnees['galaxy'];
+$_SESSION['ss'] = $donnees['ss'];
+$_SESSION['pos'] = $donnees['pos'];
+
+if ($data['race'] == "covenant") {
+header("Location: inde.php"); }
+else if ($data['race'] == "humain") {
+header("Location: ind.php"); }
+}
+
+else {
+  echo 'Mauvais pseudo ou mot de passe, veuillez réessayer !<br><br><a href=index.html>Login</a>';
+}
+?>