ThaiSEOBoard.com

<form name="form1" method="post" action="checkuser.php">
  <div class="title">Admin Login</div>
  <input type="text" name="txtUser" placeholder="Username">
  <input type="password" name="txtPass" placeholder="Password">
  <input type="submit" name="submit" value="Login">
</form>

<?

   session_start();
   include "connect.php";

   $strSQL = "SELECT * FROM tb_admin WHERE admin_user = '".mysql_real_escape_string($_POST['txtUser'])."' and admin_pass = '".mysql_real_escape_string(md5($_POST['txtPass']))."'";
   $objQuery = mysql_query($strSQL);
   $objResult = mysql_fetch_array($objQuery);
   if(!$objResult)
   {
         echo "Username and Password Incorrect!";
         
         echo $strSQL;
   }
   else
   {
         $_SESSION["UserID"] = $objResult["UserID"];
         $_SESSION["Status"] = $objResult["Status"];

         session_write_close();

            header("location:admin.php");
   }
   mysql_close();
?>

หมายถึง มันไม่มีค่าอะไร เข้ามา หรอครับ