<?php
$_SESSION['lastPage'] = 2;

if(isset ($_GET['action']) && $_GET['action'] == 'logout') {
    $_SESSION['username'] = "";
    $_SESSION['user_id'] = "";
    $_SESSION['admin'] = false;
    header('Location: ?page=home');
}

if(isset($_POST['user']) && isset($_POST['pass'])) {
    $query = 'select * from users where nick="'.$_POST['user'].'" and password="'.md5($_POST['pass']).'"';
    $result = mysql_query($query);

    if(mysql_num_rows($result) > 0) {
        $_SESSION['user_id'] = mysql_result($result, 0, "id");
        $_SESSION['username'] = mysql_result($result, 0, "name");

        if(mysql_result($result, 0, "admin") == "1")
            $_SESSION['admin'] = true;

        header('Location: ?page=home');
    }
    else {
        $error = "* Wrong username / password!";
        showLoginForm($error);
    }
}
else {
    showLoginForm(null);
}

function showLoginForm($error) {
    ?>
    <div class="mainContent" style="min-height: 495px;">
        Please insert your login information:<br><br>
        <form name="login" method="post" action="?page=login">
            <table width="550" border="0" cellpadding="0" cellspacing="5" class="formulario">
                <tr>
                    <td width="100">Username:</td>
                    <td width="200"><input name="user" type="text" id="user"></td>
                    <td width="250"></td>
                </tr>
                <tr>
                    <td width="100">Password:</td>
                    <td width="200"><input name="pass" type="password" id="pass"></td>
                    <td width="250"></td>
                </tr>
                <tr>
                    <td width="100"></td>
                    <td width="200"><input type="submit" name="Submit" value="Login" style="width: 80px; height: 20px; margin-left: 2px; margin-top: 10px;"></td>
                    <td width="250" style="padding-top: 10px;"><div class="error"><?php if(isset ($error)) { echo $error; } ?></div></td>
                </tr>
            </table>
        </form>
        <br>
        I kinda forgot my password!<br><br>
        Not a member? Register <a href="?page=register">Here</a>!
    </div>
    <?php
}


?>