Basically the script will ensure all your settings are valid before it'll work. The settings are all in _login_users.php

You have to conform to the comments I have there. And user names can only be alphanumeric with no whitespace (hyphen and underscore is ok).

Whenever I go to the index.php it tell me that the admin settings are wrong, I know that the code for that is on page _login.php but how to I get a login form?

session_start();
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT"); #Date in the Past
header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); #Always modified
header("Cache-Control: no-store, no-cache, must-revalidate"); #HTTP/1.1
header("Cache-Control: post-check=0, pre-check=0", false);
header("Pragma: no-cache"); #HTTP/1.0
require_once('_login.php');
if (!$login->verify_login($key_uid, $key_cid)) {
  header("Location: login.php");
  exit();
}

The first five headers avoid that another user that have the same session opened backs to previous page and posts again… the if statement verify if the user has logged in or not

Thanks again!!!

Thanks. :)

Btw, I no longer need the thing I asked in my previous comment. ;)

Only one directory is password-protected.
So directories /web and /gfx are not protected, but /vip is.
I would like to have the "You are logged in as username; ?>" on all of the pages, but since only one directory requires login, would it be possible to say "You are not logged in/You are logged in as Guest" if user is not logged in. If I do it with the code above and am not logged in, I get:
"You are logged in as ."

Anything I can do?

How well does this go up against rainbow tables? Is there a salt? (im noob)

Could you also provide me the code for login of users USING the Database?

Thank you,
Kin