<?php
require_once('./config/server-data.php_data_classes-core.php.php');
if (isset($_SESSION['username'])) {
header("location: $path/me");
}
$ip_check = mysql_query("SELECT ip_last,username,id FROM users WHERE ip_last = '".$remote_ip."'");

if(isset($_POST['credentials_username']) && isset($_POST['credentials_password']))
{
    if(empty($_POST['credentials_username']))
    {
        $login_fehler = "Você deixou o campo nome em branco!";
    }
    elseif(empty($_POST['credentials_password']))
    {
        $login_fehler = "Você deixou o campo senha em branco!";
    }
    else
    {
        if(isset($_COOKIE['password']))
        {
            $pwd = HoloHashMD5($_COOKIE['password']);
        }
        else
        {
            $pwd = HoloHashMD5($_POST['credentials_password']);
        }
        $userq = mysql_query("SELECT username, password FROM users WHERE username = '".HoloText($_POST['credentials_username'])."' AND password = '".$pwd."' LIMIT 1");
        if(mysql_num_rows($userq) == 1)
        {
            $user = mysql_fetch_assoc($userq);

            $banq = mysql_query("SELECT id, value, reason, expire FROM bans WHERE (value = '".$user['username']."' OR value = '".$_SERVER['REMOTE_ADDR']."') AND expire > '".time()."' LIMIT 1");
            if(mysql_num_rows($banq) == 1)
            {
                $ban = mysql_fetch_assoc($banq);

                $login_fehler = "Você foi banido por: ".$ban['reason']." até ".date("d/m/Y H:i:s", $ban['expire']);
            }
            else
            {

                $_SESSION['username'] = $user['username'];
                $_SESSION['password'] = $user['password'];
                if($_POST['_login_remember_me'] == "true"){
                                setcookie("remember", "remember", time()+60*60*24*100, "/");
                                setcookie("rusername", $_SESSION['username'], time()+60*60*24*100, "/");
                                setcookie("rpassword", $_SESSION['password'], time()+60*60*24*100, "/");
                }

                header("location: $path/security_check");

            }
        }
        else
        {
            $login_fehler = "Nome ou senha estão incorretos!";
        }
    }
}
?>