<?php
//check logged in/cookies/etc
class login {

function qdb_check_login_info($username, $password, $access) {
require_once('mysql.php');
$find_user = mysql_query("SELECT * FROM $member WHERE username='$username'");
    if(!$find_user){
    return false;
    }

$user_info = mysql_fetch_array($find_user);
$user_access = $user_info['access'];

    if($password != $user_info['password']) {
    return false;
    }
    if($access != $user_info['access']) {
    return false;
    }
//if password is correct and access is correct
return true;
}



    if(isset($_SESSION['username'])) {
        $un = $_SESSION['username'];
        if(isset($_SESSION['password'])) {
            $pw = $_SESSION['password'];
        }
        else {
            unset($_SESSION['username']);
            return false; }

        if(isset($_SESSION['access'])){
            $ac = $_SESSION['access'];
        }
        else {
            unset($_SESSION['username']);
            unset($_SESSION['password']);
            return false;
        }
        //Username, password, and access are set, check match with db here
        if(qdb_check_login_info($un, $pw, $ac) == false){
        $inTwoMonths = time() - 60;
        unset($_SESSION['username']);
        unset($_SESSION['password']);
        unset($_SESSION['access']);
        return false;
        }
        else
        {
        return true;
        }
    }


        if(isset($_COOKIE['username'])) {
        $un = $_COOKIE['username'];
        if(isset($_COOKIE['password'])) {
            $pw = $_COOKIE['password'];
        }
        else {
            $inTwoMonths = time() - 60;
            setcookie('username', '', $inTwoMonths);
            return false; }

        if(isset($_COOKIE['access'])){
            $ac = $_COOKIE['access'];
        }
        else {
            $inTwoMonths = time() - 60;
            setcookie('username', '', $inTwoMonths);
            setcookie('password', '', $inTwoMonths);
            return false;
        }
        //Username, password, and access are set, check match with db here
        if(qdb_check_login_info($un, $pw, $ac) == false){
        $inTwoMonths = time() - 60;
        setcookie('username', '', $inTwoMonths);
        setcookie('password', '', $inTwoMonths);
        setcookie('access', '', $inTwoMonths);
        return false;
        }
        else
        {
        $_SESSION['username'] = $un;
        $_SESSION['password'] = $pw;
        $_SESSION['access'] = $ac;
        return true;
        }
    }


}



//Login
function qdb_login($username, $password){
require_once('mysql.php');
$find_user = mysql_query("SELECT * FROM $member WHERE username='$username'") or die('Username does not exist');
$user_info = mysql_fetch_array($find_user);
$user_access = $user_info['access'];
if($username == $user_info['username']) {
    if($password == $user_info['password']) {
    //If username and password are correct
    $inTwoMonths = 60 * 60 * 24 * 60 + time();
    setcookie('username', $username, $inTwoMonths);
    setcookie('password', $password, $inTwoMonths);
    setcookie('access', $user_access, $inTwoMonths);
    $_SESSION['username'] = $username;
    $_SESSION['password'] = $password;
    $_SESSION['access'] = $user_access;
    return 'Logged in successfully, ' . $username . '.';
    }
    else
    {
    //If username is correct, password is incorrect
    return 'The password you entered for ' . $username . ' was incorrect, please try again.';
    }
}
else
{
//if username is incorrect, no need to check if password is correct
return 'The username you entered was not found, please try again';
}

};

$login = new login;

?>