php mysql remember me login

<?php
 
//login page
 
if (isset($_POST['submit']))
{
 
        $uname = ($_POST['uname']);
        $passwd = ($_POST['passwd']);
        $remember_me = ($_POST['remember_user']);
    // if form has been submitted
 
    /* check they filled in what they were supposed to and authenticate */
 
    $fd = fopen('/dev/urandom', 'r');
        $tmp = fread($fd, 1000);
        fclose($fd);
        $site_uhash = md5($tmp);
 
        if (isset($_POST['remember_user']))
        {
                $cookiedata = $_POST['uname']."|".md5($_POST['passwd'])."|".$site_uhash;
                setcookie("autologin", $cookiedata, time() + 31536000);
        }
 
        if(!$_POST['uname'])
        {
                        "";
        }
 
        else if(!$_POST['passwd'])
        {
                        "";
        }
 
    // authenticate.
 
    if (!get_magic_quotes_gpc())
    {
        $_POST['uname'] = addslashes($_POST['uname']);
    }
 
    $check = $db_object->query("SELECT users_id, username, password, userlevel, uhash, deluser_ FROM users WHERE username = '".$_POST['uname']."' AND deluser_ = '0'");
 
    if (MDB2::isError($check) || $check->numRows() == 0)
        {
                //echo ('<span style="font-weight: bold; color: #691717;">v&auml;&auml;r&auml; tunnus.</span>');
           //echo ('<br/>');
 
    }
        $sqlquery = "select * FROM users WHERE username = '".$_POST['uname']."' AND deluser_ = '0'";
        $result = mysql_query($sqlquery);
        while ($row = mysql_fetch_array($result))
        {
                $count_float = $row['count_float'];
                $float = $row['float_user'];
                $count = $row['count_logons'];
        }
 
    $info = $check->fetchRow();
    $count_add = $count+1;
 
    if ($float == 1)
    {
                $count_float_add = $count_float + 1;
        }
    // check passwords match
 
    $_POST['passwd'] = stripslashes($_POST['passwd']);
    $info['password'] = stripslashes($info['password']);
    $_POST['passwd'] = md5($_POST['passwd']);
 
    if ($_POST['passwd'] != $info['password'])
    {
       //echo ('<span style="font-weight: bold; color: #691717;">v&auml;&auml;r&auml; salasana.</span>');
        //echo ('<br/>');
        }
 
else
{
            // if we get here username and password are correct,
            //register session variables and set last login time.
 
            $date = date('d.m.Y H.i');
 
            // get userid from db query
            $usersid_ = $info['users_id'];
        $_SESSION['users_id'] = $usersid_;
 
            $update_login = $db_object->query("UPDATE users SET count_logons='$count_add', uhash='$site_uhash', count_float='$count_float_add' WHERE username = '".$_POST['uname']."'");
 
            $_POST['uname'] = stripslashes($_POST['uname']);
            $_SESSION['site_uhash'] = $site_uhash;
 
            $db_object->disconnect();
 
        $goback ="http://www.toubes-page.net/td/user";
        header ("Location: $goback");
}
 
}
?>
 
 
// Index.php page
 
<?php
 
require ('template.php');
include("db_connect.php");
include 'online_users/whosonlineupdate.php';
 
if (isset($_COOKIE['autologin']) && !isset($_SESSION['site_uhash']))
{
 
//this line checks that the cookie is set and the username session is not set (ie. the user has not yet been logged in and //they have the autologin cookie set).
 
 $splitcookie = explode("|",$_COOKIE['autologin']);
 $cookie_username = $splitcookie[0];
 $cookie_password = $splitcookie[1];
 $cookie_uhash = $splitcookie[2];
 
//the above code splits the data in the cookie so you have the user name in the first variable ($cookie_username) and the //password in the second ($cookie_password).
 
$query = "SELECT username, password, uhash FROM users WHERE username='$cookie_username' AND password='$cookie_password' AND uhash='$cookie_uhash' LIMIT 1;";
 
 $logincookie = mysql_query($query) or die(mysql_error());
 
 if (mysql_num_rows($logincookie) < 1)
 {
        echo "Cookie Error - Auto Login Failed!<br>\n";
 }
 
 // $users_id = mysql_result($logincookie, 0, "users_id");
  $site_uhash = mysql_result($logincookie, 0, "uhash");
  $_SESSION['site_uhash'] = $site_uhash;
  //$_SESSION['users_id'] = $users_id;
 
//In the above code you are using the results returned by the database to set the session vars up (like you would when you //handle the login normally), you may need to add some code here to set more data in sessions.
}
 
if ($logged_in == 0)
{
                $goback ="http://www.toubes-page.net/td/index.php?id=cpanel&page=logout&amp;logged_in=0";
                header ("Location: $goback");
}
 
if (!isset($_SESSION['count']))
{
    $_SESSION['count'] = 0;
    //$count = $_SESSION['count'];
    $_SESSION['session_start'] = time();
}
else
{
    $_SESSION['count']++;
}
$session_timeout = 5; // 1 hr (in sec)
 
$session_duration = time() - $_SESSION['session_start'];
if ($session_duration > $session_timeout)
{
    $goback ="http://www.toubes-page.net/td/index.php?id=cpanel&page=logout";
        header ("Location: $goback");
}
$_SESSION['session_start'] = time();
 
 
require ('basepage.php');
basepage("main");
?>