<?php
include ("conex.php");
session_start();
$link = Conectarse();
	//Array to store validation errors
	$errmsg_arr = array();
	//Validation error flag
	$errflag = false;

$login = clean($_POST['log']);
$password = clean($_POST['pwd']);


if($login == '') {
		$errmsg_arr[] = 'Login ID missing';
		$errflag = true;
	}
if($password == '') {
		$errmsg_arr[] = 'Password missing';
		$errflag = true;
	}
	//	If there are input validations, redirect back to the login form
	if($errflag) {
		$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
		session_write_close();
		header("location: login-failed.php");
		exit();
	}


$consulta ="SELECT * FROM usuarios WHERE username='$login' AND pass= SHA('$password')";
$result = mysql_query($consulta);
if($result) {
		if(mysql_num_rows($result) == 1) {
			//Login Successful
			session_regenerate_id();
			$member = mysql_fetch_assoc($result);
			$_SESSION['USUARIO_LOGUEADO'] = 'OK';
			$_SESSION['NOMBRE'] = $member['nombres'];
			$_SESSION['APELLIDO'] = $member['apellidos'];
			session_write_close();
			header("location: ../dashboard.php");
			exit();
		}else {
			$_SESSION['ERRMSG_ARR'] = 'login incorrecto';
			header("location: login-failed.php");
			exit();
		}
	}else {
		die("Query failed");
	}

mysql_free_result($result);
$link = Desconectarse();
 ?>