Untitled

<?php
if (!isset($_SESSION))
    {
        session_start();
    }
if(isset($_SESSION['user']))
    {
        header('Location: ../uploader/users/'.$_SESSION['user'].'/index.php'); // [user]
        exit();
    }
?>
<?php require_once('../Connections/uploader.php'); ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />

    <title>Login Page</title>

    <link rel="stylesheet" type="text/css" href="style.css" />
</head>

<body>

<div>
<noscript>
<p>We heighly recommend that you <a href="enable_javascript.php" target="_blank">enable Javascript</a> for the best browsing experience.  </p>
</noscript>
</div>
<?
function loginFormErrorsCheck ($loginUsername, $loginPassword) {
  if (empty($loginUsername) || empty($loginPassword)) {
    return true;
  } else {
    return false;
  }
}
?>
<?php
if(isset($_SESSION['user']))
{
    echo ("<p align='center'>If you are not automatically redirected, please click <a href='../uploader/users/$_SESSION[user]/index.php'>here</a>.</p>");
}
?>
<?php
if(isset($noLogin)) {
    echo "<div class='error' style='text-align:center;'>Your session has timed out.  Please login again.<br><br></div>";
}
if(isset($closeBrowser)) {
    echo "<div class='noError'><img src='../Images/error_image.png' width='16' height='16' /> <b>Notice</b>: You were successfully logged out.  <em>Please close your browser to prevent others from accessing your account.</em></div><p>";
}
?>
<?php
if (isset($_POST['login'])) {

    $loginUsername = $_POST['uname'];
    $loginPassword = $_POST['pword'];

    $blank_fields = loginFormErrorsCheck ($loginUsername, $loginPassword);

    if (isset($blank_fields)) { }

    if (!$blank_fields) {
        $loginPassword = md5($loginPassword);

        mysql_select_db($database_uploader, $uploader);
        $query = "SELECT * FROM members WHERE uname='"
        . mysql_real_escape_string($loginUsername) .
        "' AND pword='" . mysql_real_escape_string($loginPassword) . "'";
        $result = mysql_query($query) or die(mysql_error());

        // make sure the username and password were found
        if (mysql_num_rows($result) > 0) {
            $row = mysql_fetch_array($result) or die(mysql_error());

            if ($loginUsername == "admin") { // Admin Login
                mysql_close($result);
                $_SESSION['admin'] = "Admin.";
                header('Location: ../uploader/users/admin/index.php');
                exit;
            }

            if ($row['acntStatus'] == 0) {  // If account is OK
            }
            else // If account is in bad standing
                {
                    $login_errors[]="<div class='error'><img src='../Images/error_image.png' width='16' height='16' /> <b>Error</b>: Your account has been temporarily/permanently disabled, or terminated. Please contact us for more details.";
                }

            if ($row['activated'] == 1) {
            }
            else {$login_errors[] = "<div class='error'><img src='../Images/error_image.png' width='16' height='16' /> <b>Error</b>: Your account is not yet activated.";}

            if ($row['activated'] == 1 && $row['acntStatus'] == 0)
            {
                $_SESSION['user'] = $loginUsername;
                mysql_close($result);
                header('Location: users/' . $row['uname'] . '/index.php');
                exit;
            }
        }
        else {$login_errors[] = "<div class='error'><img src='../Images/error_image.png' width='16' height='16' /> <b>Error</b>: Please check your User ID and Password, and try again.";}
    } else { $login_errors[] = "<div class='error'><img src='../Images/error_image.png' width='16' height='16' /> <b>Error</b>: Please fill in all fields.</div>";
    }
}
?>

<?php
if (isset($login_errors) && !empty($login_errors)) {
    $result = count($login_errors);

    for ($i=0; $i<$result; $i++) {
        echo "<p class='errors'>$login_errors[$i]<br></p>";
    }
}
?>