php

<?php

session_start();
ob_start();

$con = mysql_connect('mysql13.unoeuro.com', 'nodebook_dk_db', 'users') or die(mysql_error());
$db = mysql_select_db('nodebook_dk_db', $con) or die(mysql_error());

include "./functions.php";

?>
<div class="box">
<html>
	<head>
		<title>Log Ind</title>
		<link rel="stylesheet" type="text/css" href="style.css" />
	</head>
	<body>
		<?php

		if($_POST['submit']){

			$username = protect($_POST['username']);
			$password = protect($_POST['password']);


			if(!$username || !$password){

				echo "<center>Du skal skrive et <b>Brugernavn</b> og et <b>Password</b>!</center>";
			}else{

				$res = mysql_query("SELECT * FROM `users` WHERE `username` = '".$username."'");
				$num = mysql_num_rows($res);

				if($num == 0){

					echo "<center>det <b>Brugernavnet</b> du har skrevet findes ikke!</center>";
				}else{

					$res = mysql_query("SELECT * FROM `users` WHERE `username` = '".$username."' AND `password` = '".$password."'");
					$num = mysql_num_rows($res);

					if($num == 0){

						echo "<center>Det indtastede <b>Password</b> og <b>Brugernavn</b> passede ikke sammen! Prøv igen</center>";
					}else{

						$row = mysql_fetch_assoc($res);

						if($row['active'] != 1){

							echo "<center>Du har ikke <b>aktiveret</b> din bruger endnu!</center>";
						}else{

							$_SESSION['uid'] = $row['id'];

							echo "<center>Du er nu loggede ind!</center>";

							$time = date('U')+50;
							mysql_query("UPDATE `users` SET `online` = '".$time."' WHERE `id` = '".$_SESSION['uid']."'");


							header('Location: usersOnline.php');
						}
					}
				}
			}
		}

		?>
<?
ob_end_flush();
?>