<?php
session_start();
if (!isset($_SESSION['initiated']))
{
	session_regenerate_id();
	$_SESSION['initiated'] = true;
}
if (isset($_SESSION['HTTP_USER_AGENT']))
{
	if ($_SESSION['HTTP_USER_AGENT'] != md5($_SERVER['HTTP_USER_AGENT']))
	{
		echo(its working fuck head but your not in the system1');
		exit();
	}
}
else
{
	$_SESSION['HTTP_USER_AGENT'] = md5($_SERVER['HTTP_USER_AGENT']);
}
$username = $_POST['username'];
$password = $_POST['password'];
require 'connect.php';
$username = mysql_real_escape_string($username);
$query = "SELECT password, salt
	FROM users
	WHERE username = '$username';";
$result = mysql_query($query);
if(mysql_num_rows($result) < 1) // no such user exists
{
		echo(its working fuck head but your not in the system2');
}
$userData = mysql_fetch_array($result, MYSQL_ASSOC);
$hash = hash('sha256', $userData['salt'] . hash('sha256', $password) );
if($hash != $userData['password']) //incorrect password
{
		echo(its working fuck head but your not in the system3');
}
//login successful
else
{
	validateUser();
}
?>