<?php
session_start();

/**
 * @author Soode
 * @copyright 2008
 */

$CL_user = $_POST['user'];
$CL_pass = md5($_POST['pass']);

if ($_GET['do'] == "check") {
	 $conn = mysql_connect("localhost", "root", "");
	 mysql_select_db("majk", $conn);
	 $sql = "SELECT user,pass FROM login WHERE user='".$CL_user."' AND pass='".$CL_pass."'";
	 $result = mysql_query($sql);

	 if (mysql_num_rows($result) == 0) {
	 	echo "ABABABABABABA<br />Fel uppgifter. :(";
	 	echo "<br /><br /><a href=\"index.php\">Försök igen.</a>";
	 	exit;
	}
	else {
		$info = "SELECT id,user,level FROM login WHERE user='".$_POST['user']."'";
		$user_info = mysql_query($info);
		$blip = mysql_fetch_assoc($user_info);
		$_SESSION['CL_id'] = $blip['id'];
		$_SESSION['CL_user'] = $blip['user'];
		$_SESSION['CL_level'] = $blip['level'];
	}
	echo "Du är inloggad som: ".$_SESSION['CL_user']."<br />";
	echo "Du har access level: ".$_SESSION['CL_level']."<br />";
	echo "<br /><br />[<a href=\"?logout\">Logout</a>]";
	exit();
}

if (isset($_GET['logout'])) {
	session_destroy();
	session_unset();
	header("Location: index.php");
}
if ($_SESSION['CL_user']) {
	echo "Du är redan inloggad som: ".$_SESSION['CL_user'].".<br />Med access level (".$_SESSION['CL_level'].").";
	echo "<br /><br />[<a href=\"?logout\">Logout</a>]";
} else {
?>

<form action="?p=login&do=check" method="post">
User: <input type="text" name="user" /><br />
Pass: <input type="password" name="pass" /><br />
<input type="submit" value="Send" />
</form>

<?php } ?>