<title>Login - <?php echo Config::$_SITE_NAME; ?></title>


<section class="content">
<center>

<h3>Warden Login</h2>

<form method="post" action="">

<br />

Username:<br>

<input type="text" name="username_"/><br/>

<br>Password:<br>

<input type="password" name="password_"/><br/>

<br>

<input type="submit" name="submit" value="login" class="btn btn-inverse">

</form>

<br/>
</center>

<br/><br/>
</section>

<?php

if(!defined('panel'))

	die('Nope.');

if(isset($_SESSION['user'])) echo '<script> location.replace("'.Config::$_PAGE_URL.'"); </script>';

if(isset($_POST['submit'])) {

	if(!$_POST['username_'] || !$_POST['password_']) {

		echo '<div class="alert alert-block alert-danger"><button type="button" class="close" data-dismiss="alert"><i class="ace-icon fa fa-times"></i></button>Complete all fields.</div>';

	} else {

		$q = Config::$g_con->prepare('SELECT * FROM `users` WHERE `name` = ? AND `password` = ?');

		$q->execute(array($_POST['username_'],$_POST['password_']));

		if($q->rowCount()) {

			$d = Config::$g_con->prepare('SELECT * FROM `panel_restrict` WHERE `PlayerName` = ?');

			$d->execute(array($_POST['username_']));

			$row1 = $d->fetch(PDO::FETCH_OBJ);

			if($d->rowCount() && date("Y-m-d H:i:s") <= gmdate("Y-m-d H:i:s", $row1->Time)) {



						if($row1->Permanent == 1)	{

							$expira = "<b>permanent</b>";

							} else {

							$expira = "pana la data de <b>". gmdate("Y-m-d H:i:s", $row1->Time) ."</b>";

						}

				echo '<div class="alert alert-block alert-danger">

				Your account has been banned.'.$expira.'.<br />

				Reason: <b>'.$row1->Reason.'</b><br />

				Banned on: <b>'.$row1->BanTimeDate.'</b></div>';

			} else {



				$dele = Config::$g_con->prepare("DELETE FROM panel_restrict WHERE PlayerName = ?");

				$dele->execute(array($_POST['username_']));



				$row = $q->fetch(PDO::FETCH_OBJ);

				$_SESSION['user'] = $row->id;



				echo '<script> location.replace("'.Config::$_PAGE_URL.'"); </script>';

				//setcookie ("user",$_POST['username_'],time()+3600*24*60);

				//setcookie ("password",$_POST['password_'],time()+3600*24*60);

				//header ('Location: ' . $_PAGE_URL);

			}



		}

		else echo '<div class="alert alert-block alert-danger"><button type="button" class="close" data-dismiss="alert"><i class="ace-icon fa fa-times"></i></button>Invalid username or password.</div>';

	}

}

?>