script aree protette in php/sql

[polinet]

comunque prova a fare cosi:

$sql = "SELECT * FROM tabella where userid = '".$userid."' and password= '".$password."' " ;
$result = mysql_db_query($nome_db,$sql,$db) or die("Errore ".mysql_error());
$num_rows = mysql_num_rows($result) ;

if ( $num_rows != 0 ) {

    $row = mysql_fetch_array( $result );
    
    session_register( "loggato" );
    $loggato = true;

    session_register( "id" );
    $id = $row["id"];
} else {
// non trovato
} 

poi:

<?
session_start();
$sql = "SELECT * from tbl_user where id= '" .$id."'";
$result = mysql_db_query( $nome_db, $sql, $db) or die(mysql_error());
echo $id;
?>

prova e facci sapere!