<?php session_start();

require_once("Includes/venus_connector.php");

if (isset($_POST['dologin']))
    {
    $rtg = $_POST['user_name'];
    $rtz = $_POST['password'];
    // More validation here

    $sql="SELECT * FROM venus_users WHERE v_user_name = '$rtg' AND v_user_pass = MD5('$rtz') LIMIT 1";
    $result=mysql_query($sql) or die (mysql_error()."Error");
    $number = mysql_numrows($result);
    if ($number > 0)
        {
        for ($i=0; $i<$number; $i++)
            {
            $usrid = mysql_result($result,$i,"v_user_id");
            $uname = mysql_result($result,$i,"v_user_name");
            $uleve = mysql_result($result,$i,"v_user_level");
            $uthem = mysql_result($result,$i,"v_user_theme");
            $uavat = mysql_result($result,$i,"v_user_avatarurl");
            $uemai = mysql_result($result,$i,"v_user_email");
            $uloca = mysql_result($result,$i,"v_user_postcode");
            $ufuln = mysql_result($result,$i,"v_user_fullname");

            $ugoto = mysql_result($result,$i,"v_user_logindest");

            $_SESSION['username'] = $uname;
            $_SESSION['userid'] = $usrid;
            $_SESSION['userlevel'] = $uleve;
            $_SESSION['useravatar'] = $uavat;
            $_SESSION['useremail'] = $uemai;
            $_SESSION['userlocation'] = $uloca;
            $_SESSION['userfullname'] = $ufuln;

            setcookie("username", $uname, time()+(60*60*24*365));
            setcookie("userid", $usrid, time()+(60*60*24*365));
            setcookie("userlevel", $uleve, time()+(60*60*24*365));
            setcookie("useravatar", $uavat, time()+(60*60*24*365));
            setcookie("useremail", $uemai, time()+(60*60*24*365));
            setcookie("userlocation", $uloca, time()+(60*60*24*365));
            setcookie("userfullname", $ufuln, time()+(60*60*24*365));

            $audit_person = $_SESSION['userid'];
            $adip = $_SERVER['REMOTE_ADDR'];
            $audit_item = 'login';
            $sql2="INSERT INTO venus_audit (v_audit_userid,v_audit_ip,v_audit_event) VALUES ('$audit_person','$adip','$audit_item')";
            $result=mysql_query($sql2) or die(mysql_error());
            }
        }
    else
        {

        $ugoto = '/';
        $audit_person = 666;
        $adip = $_SERVER['REMOTE_ADDR'];
        $audit_item = '*** failed login (tried '.$rtg.') ***';
        $sql2="INSERT INTO venus_audit (v_audit_userid,v_audit_ip,v_audit_event) VALUES ('$audit_person','$adip','$audit_item')";
        $result=mysql_query($sql2) or die(mysql_error());
        }

    header("location: $ugoto");exit;

    }

if(isset($_POST['dologout']))
    {
    $audit_person = (isset($_SESSION['userid']) ? $_SESSION['userid'] : (isset($_COOKIE['userid']) ? $_COOKIE['userid'] : ''));
    $adip = $_SERVER['REMOTE_ADDR'];
    $audit_item = 'logout';
    $sql="INSERT INTO venus_audit (v_audit_userid,v_audit_ip,v_audit_event) VALUES ('$audit_person','$adip','$audit_item')";
    $result=mysql_query($sql) or die(mysql_error());

    unset ($_SESSION['username']);
    unset ($_SESSION['userid']);
    unset ($_SESSION['userlevel']);
    unset ($_SESSION['useremail']);
    unset ($_SESSION['userfullname']);

    unset ($_COOKIE['username']);
    unset ($_COOKIE['userid']);
    unset ($_COOKIE['userlevel']);
    unset ($_COOKIE['useremail']);
    unset ($_COOKIE['userfullname']);

    setcookie ("username", "", time() - 3600);
    setcookie ("userid", "", time() - 3600);
    setcookie ("userlevel", "", time() - 3600);
    setcookie ("useremail", "", time() - 3600);
    setcookie ("userfullname", "", time() - 3600);

    session_unset();
    session_destroy();

    header('location: /'); //exit;
    exit;
    }

header('location: /');exit;

?>
IP Logged