<?php
include("config.php");

if ($_POST['systemCall'] == "checkLogin") {
	$username = mysql_real_escape_string(stripslashes($_POST['username']));
	$password = md5($_POST['password']);
	$date = date('Y')."-".date('j')."-".date('d')."T".date('H').":".date('i').":".date('s').".".date('u');
	$query = mysql_query("SELECT * FROM es_users WHERE username='$username' AND password='$password' LIMIT 1");
	$user_count = mysql_num_rows($query);
	$user = mysql_fetch_assoc($query);
	if ($user_count > 0) {
		if($user['activated'] == 1){
			mysql_query("UPDATE es_users SET lastlogin='$date' WHERE username='$username' AND password='$password'") or die(mysql_error());
			print "systemResult=User login Successful.";
		} else {
			print "systemResult=User is not Activated.";
		}
	} else if($user_count == 0) {
		print "systemResult=User does not Exist.";
	}
}

if ($_POST['systemCall'] == "Register") {
	$username = mysql_real_escape_string(stripslashes($_POST['username']));
	$password2 = $_POST['password'];
	$password = md5($_POST['password']);
	$email = $_POST['email'];
	$ip = $_SERVER['REMOTE_ADDR'];
	$query = mysql_query("SELECT * FROM es_users WHERE username='$username' AND password='$password' LIMIT 1");
	$user_count = mysql_num_rows($query);

	if ($user_count > 0) {
		print "systemResult=User already Exists.";

	} else {
		mysql_query("INSERT INTO es_users(username, password, email, ip) VALUES('".$username."', '".$password."', '".$email."', '".$ip."')") or die(mysql_error());
		print "systemResult=Registration Complete.";
	}

}

if ($_POST['systemCall'] == "Check4Updates") {
	$query = mysql_query("SELECT * FROM es_settings LIMIT 1");
	$settings = mysql_fetch_assoc($query);
	print "newVersion=".$settings['newVersion']."&newVUrl=".$settings['newVUrl'];
}
?>