<?
$username=$_REQUEST["username"];
$mandant=$_REQUEST["mandant"];
$userpwd=$_REQUEST["userpwd"];
setcookie("username", "$username", time()+3600);
setcookie("mandant", "$mandant", time()+3600);
setcookie("userpwd", "$userpwd", time()+100);
require"connect.php";
 $query="SELECT * FROM user WHERE user_name = '$username' AND user_manr = " . $mandant . " AND user_pwd = '" . $userpwd . "';";
//echo$query;
 $result= mysql_query($query);
// phpinfo();
 if(mysql_errno()<>0 OR mysql_num_rows($result)<>1)
   {
     echo("<br><br><b>Username oder Passwort falsch, bzw. falscher Mandant!</b>");
     echo("<br>Fehler: " . mysql_error());
     die("<br><br><a href=\"index.php\">Erneut anmelden</a>");
   }

if($username=="super") {require"mastamm.php";}
else
{
require"main.php";
}
?>