<?php

    function fetchRow($row, $table, $page){
        $query = "SELECT ".$row." FROM ".$table." WHERE p = '".$page."' LIMIT 1";
        $result = mysql_query($query)or die(mysql_error());
        if($result){
            $record = mysql_fetch_row($result);
            echo $record[0].'<br />'.PHP_EOL;
        }
    }



    function login(){
        if(isset($_GET['action']) && ($_GET['action'] == "login")) {
            $user = mysql_real_escape_string($_POST['name']);
            $pass = mysql_real_escape_string(md5($_POST['pass']));
            $query = "SELECT * FROM users WHERE username = '".$user."' AND password = '".$pass."' AND enabled = 1";
            $result = mysql_query($query)or die(mysql_error());
            if(mysql_num_rows($result) < 1)  {
                die ('De gebruikersnaam bestaat niet of het wachtwoord is verkeerd, probeer nogmaals in te loggen.');
            }
            else {
                session_start();
                $_SESSION['name'] = $user;
                $_SESSION['pass'] = $pass;
                header('location:?p=about');
            }
        }
        echo '<form action="?p=login&action=login" method="post">
<label for="name">Loginnaam:</label>
<input type="text" name="name" id="name" maxlength="30" /><br />
<label for="pass">Wachtwoord:</label>
<input type="password" name="pass" id="pass" maxlength="30" /><br />
<label for="verzenden">&nbsp;</label>
<input type="submit" value="Inloggen"><br />
</form>
';
    }



    function register(){
        if(isset($_GET['action']) && ($_GET['action'] == "register")){
            $user = mysql_real_escape_string($_POST['name']);
            $pass = mysql_real_escape_string(md5($_POST['pass']));
            $mailadres = mysql_real_escape_string($_POST['mailadres']);
            $query = "INSERT INTO users (`username`, `password`, `mailadres`, `enabled`, `lastlogin`) VALUES ('".$user."', '".$pass."', '".$mailadres."', 1, NOW())";
            empty($pass);
            $pass = clean($_POST['pass']);
            if(empty($user)) {
                echo 'naam is leeg';
            }
            elseif(empty($pass)) {
                echo 'pass is leeg';
            }
            elseif(empty($mailadres)) {
                echo 'mail is leeg';
            }
            else
                if(mysql_query($query)){
                    echo 'Registratie is gelukt. Klik <a href="?p=login">hier</a> om in te loggin.';
                }
                else {
                    echo 'Registratie mislukt!';
                }
        }
        echo'<form action="?p=register&action=register" method="post">
<label for="name">Loginnaam:</label>
<input type="text" name="name" id="name" maxlength="30" /><br />
<label for="pass">Wachtwoord:</label>
<input type="password" name="pass" id="pass" maxlength="30" /><br />
<label for="mailadres">Email:</label>
<input type="text" name="mailadres" id="mailadres" maxlength="60" /><br />
<label for="verzenden">&nbsp;</label>
<input type="submit" name="verzenden" id="verzenden" value="Verzenden" /><br />
</form>
';
    }



    function clean($str) {
        $str = @trim($str);
        if(get_magic_quotes_gpc()) {
            $str = stripslashes($str);
        }
        return mysql_real_escape_string($str);
    }

?>