<?php

    $seeform = true;
    $melding = '<p></p>';
    if(isset($_POST['login']))
    {
        if(empty($_POST['username']) || empty($_POST['password']))
        {
            $melding = '<p class="false">Je moet wel alle velden invlullen</p>';
            $seeform = true;
        }
        else
        {
            $sql = "SELECT * FROM users WHERE username = '".mysql_real_escape_string($_POST['username'])."' AND password = '".sha1(md5($_POST['password']))."' AND actived != 'no'";
            $users = $this->database->query($sql);
            if(empty($users))
            {
                $melding = '<p class="false">Je habbonaam en/of wachtwoord klopt niet</p>';
                $seeform = true;
            }
            else
            {
                $_SESSION['userid'] =  $users[0]['id'];
                $_SESSION['logedin'] = true;


                $seeform = false;
                $melding = '<p class="true">Je bent succesvol ingelogd!</p>';

            }

        }
    }
    if($seeform == true)
    {
        $left .= $melding.'<form method="post" action="'.URL.'">';
        $left .= '<label for="username">Gebruikersnaam:</label><br />';
        $left .= '<input type="text" id="username" name="username" class="loginform" /><br />';
        $left .= '<label for="password">Wachtwoord:</label><br />';
        $left .= '<input type="password" id="password" name="password" class="loginform" /><br />';
        $left .= '<input type="submit" name="login" value="Inloggen" class="button" />';
        $left .= '</form><br /><a href="#">Wachtwoord vergeten?</a><br />Nog geen account? <a href="'.URL.'/p/register/">Registreer</a>';
    }
    else
    {
        $left .= $melding;
    }
?>