<?PHP
include("_gvars.php");
// anti-ddos
$user1 = mysql_real_escape_query($_POST['username']);
$pass1 = mysql_real_escape_query($_POST['password']);
$user2 = stripslashes($user1);
$pass2 = stripslashes($pass1);
$userlen = strlen($_POST['username']);
$passlen = strlen($_POST['password']);
$ping = mysql_ping();
// testing ping - disconnect if too high
if($ping > 10000){
mysql_close();
}
else {
}
$check-pass = mysql_query('SELECT password FROM members WHERE username="$user2"');
$checkpass = mysql_fetch_assoc($check-pass);
$usercount = mysql_num_rows($checkpass);
if($usercount = 1){
$_SESSION['online'] = "1";
$_SESSION['username'] = "$user1";
$getrank = mysql_query('SELECT rank FROM members WHERE username="$user2"');
$_SESSION['rank'] = "$getrank";
$getgroup = mysql_query('SELECT group FROM members WHERE username="$user2"');
$_SESSION['group'] = "$getgroup";
$isstaff = mysql_query('SELECT staff FROM members WHERE username="$user2"');
$_SESSION['group'] = "$isstaff";
$siteadmin = mysql_query('SELECT siteadmin FROM members WHERE username="$user2"');
$_SESSION['group'] = "$siteadmin";
}
elseif($userlen < 3){
header("location:index.php");
}
elseif($passlen < 3){
header("location:index.php");
}
else {
header("location:index.php");
}
?>