<?php
/*
Template Name: Login Page
*/
the_post();
get_header();
?>
<div class=”wrapper”>
<?php
global $wpdb;
$err = ”;
$success = ”;
if(isset($_POST['task']) && $_POST['task'] == ‘login’ )
{
//We shall SQL escape all inputs to avoid sql injection.
$username = $wpdb->escape($_POST['log']);
$password = $wpdb->escape($_POST['pwd']);
$remember = $wpdb->escape($_POST['remember']);
if( $username == “” || $password == “” ) {
$err = ‘Please don\’t leave the required field.’;
} else {
$user_data = array();
$user_data['user_login'] = $username;
$user_data['user_password'] = $password;
$user_data['remember'] = $remember;
$user = wp_signon( $user_data, false );
if ( is_wp_error($user) ) {
$err = $user->get_error_message();
exit();
} else {
wp_set_current_user( $user->ID, $username );
do_action(‘set_current_user’);
echo ‘<script type=”text/javascript”>window.location=’. get_bloginfo(‘url’) .’</script>’;
exit();
}
}
}
?>
<form method=”post”>
<h2>Already have an account? Please login.</span></h2>
<p>
<?php
if( !empty($sucess) )
echo $sucess;
if( !empty($err) )
echo $err;
?>
</p>
<p><label for=”log”>Email</label>
<input type=”text” name=”log” id=”log” value=”" /></p>
<p><label for=”pwd”>Password</label>
<input type=”password” name=”pwd” id=”pwd” value=”" /></p>
<p><input type=”submit” value=”Login” class=”button” /></p>
<label><input type=”checkbox” name=”remember” value=”true” /> Remember Me</label>
<input type=”hidden” name=”task” value=”login” />
</form>
</div>
<?php get_footer() ?>
|