<?php
$page = $_GET['page'];
$query = $_GET['query'];
if($page == "login"){
	if($query == "send"){
		$username = mysql_real_escape_string($_POST['id']);
		$password = mysql_real_escape_string(md5($_POST['pw']));
		$check = $_SESSION['check'];
		if(isset($check)) {
				$result = mysql_query("SELECT * FROM sp_users WHERE name = '$username' AND password = '$password'");
				$count = mysql_num_rows($result);
				if($count == 1){
					$result = mysql_query("SELECT * FROM sp_users WHERE name = '$username'");
					$count = mysql_num_rows($result);
					if($count == 1){
						session_start();
						$_SESSION['id'] = $username;
						echo 'Suuname sind kohe edasi !';
						echo '<meta HTTP-EQUIV="REFRESH" content="0; url=index.php">';
					} else {
						echo '
						Midagi on valesti !
						Su kasutaja pole aktiveeritud!<br /><br />';
					}
				} else {
					echo '
					Midagi on valesti !
					Oled sisestanud vale kasutajanime ja/või parooli!<br /><br />';
					//unset($check);
				}
		}
	}
}
if(isset($_SESSION['id'])) {
	echo '<meta HTTP-EQUIV="REFRESH" content="0; url=index.php">';
}
?>