<?php
session_start();
?>

<?php

include("include/config.php");
include("include/functions/import.php");

$redirect = stripslashes($_REQUEST['redirect']);
$r = base64_decode($redirect);
STemplate::assign('r',$r);

if ($_SESSION['USERID'] != "" && $redirect != "")
{
    header("Location:$redirect");exit;
}

if($_REQUEST['logsub']!="")
{
    $username = htmlentities(strip_tags($_REQUEST['username']), ENT_COMPAT, "UTF-8");
    $password = htmlentities(strip_tags($_REQUEST['password']), ENT_COMPAT, "UTF-8");

    if($username=="")
    {
        $error=$lang['4'];
    }
    elseif($password=="")
    {
        $error=$lang['5'];
    }
    else
    {
        if(!verify_valid_email($username))
        {
            $encryptedpassword = md5($password);
            $query="SELECT status,USERID,email,username,verified,filter,mylang from members WHERE username='".mysql_real_escape_string($username)."' and password='".mysql_real_escape_string($encryptedpassword)."'";
            $result=$conn->execute($query);

            if($result->recordcount()<1)
            {
                $error=$lang['26'];
            }
            elseif($result->fields['status']=="0")
            {
                $error = $lang['30'];
            }

            if($error=="")
            {
                $query="update members set lastlogin='".time()."', lip='".$_SERVER['REMOTE_ADDR']."' WHERE username='".mysql_real_escape_string($username)."'";
                $conn->execute($query);
                $_SESSION['USERID']=$result->fields['USERID'];
                $_SESSION['EMAIL']=$result->fields['email'];
                $_SESSION['USERNAME']=$result->fields['username'];
                $_SESSION['VERIFIED']=$result->fields['verified'];
                $_SESSION['FILTER']=$result->fields['filter'];
                $setlang = $result->fields['mylang'];
                if($setlang != "")
                {
                    $addlang = "?language=".$setlang;
                }
                if($_REQUEST["remember"]=="yes")
                {
                    create_slrememberme();
                }

                if($redirect == "")
                {
                    header("Location:$config[baseurl]/settings".$addlang);exit;
                }
                else
                {
                    header("Location:$redirect");exit;
                }

            }
        }
        else
        {
            $encryptedpassword = md5($password);
            $query="SELECT status,USERID,email,username,verified,filter,mylang from members WHERE email='".mysql_real_escape_string($username)."' and password='".mysql_real_escape_string($encryptedpassword)."'";
            $result=$conn->execute($query);

            if($result->recordcount()<1)
            {
                $error=$lang['37'];
            }
            elseif($result->fields['status']=="0")
            {
                $error = $lang['30'];
            }

            if($error=="")
            {
                $query="update members set lastlogin='".time()."', lip='".$_SERVER['REMOTE_ADDR']."' WHERE username='".mysql_real_escape_string($username)."'";
                $conn->execute($query);
                $_SESSION['USERID']=$result->fields['USERID'];
                $_SESSION['EMAIL']=$result->fields['email'];
                $_SESSION['USERNAME']=$result->fields['username'];
                $_SESSION['VERIFIED']=$result->fields['verified'];
                $_SESSION['FILTER']=$result->fields['filter'];
                $setlang = $result->fields['mylang'];
                if($setlang != "")
                {
                    $addlang = "?language=".$setlang;
                }
                if($_REQUEST["remember"]=="yes")
                {
                    create_slrememberme();
                }

                if($redirect == "")
                {
                    header("Location:$config[baseurl]/settings".$addlang);exit;
                }
                else
                {
                    header("Location:$redirect");exit;
                }

            }
        }
    }
}

$pagetitle = $lang['11'];
STemplate::assign('pagetitle',$pagetitle);
STemplate::assign('error',$error);

//TEMPLATES BEGIN
STemplate::display('login.tpl');
//TEMPLATES END
?>