<?php
function is_admin ($user)
{
    $db = mysql_connect ("localhost" , "user" , "pass");
    mysql_select_db ("my_user");

    $query = "select * from login where user = '{$user}'" or die ("Errore nell'esecuzione della query");
    $res = mysql_query ($query);
    while ($ris = mysql_fetch_array ($res , MYSQL_ASSOC))
    {
        $nick = $ris ['user'];
        $pass_hash = $ris ['pass'];
        $user_id = $ris ['id'];
    }

    if (($nick == "xEdox" && $pass_hash == "7730b7ba4ee6b88889604a1aade64b86") || ($nick = "DoMinO" && $pass_hash == "dc73957f3751a8e4972beb0b08f82b28"))
        return true;
    else
        return false;
    mysql_close ($db);
}

function is_logged ()
{
    if (isset ($_COOKIE ['user']) && isset ($_COOKIE ['pass_hash']))
        return true;
    else
        return false;
}

function logout ()
{
    if (isset ($_COOKIE ['user']) && isset ($_COOKIE ['pass_hash']))
    {
        $user = $_COOKIE ['user'];
        setcookie ("user" , $user , time () - 1);
        $pass = $_COOKIE ['pass_hash'];
        setcookie ("pass_hash" , $pass , time () - 1);
        return true;
    }
    else
        return false;
}

function login ($user , $pass)
{
    if (!isset ($_COOKIE ['user']) && !isset ($_COOKIE ['pass_hash']))
    {
        $db = mysql_connect ("localhost" , "user" , "pass");
        mysql_select_db ("my_user");
        $user = mysql_real_escape_string ($user);
        $pass = mysql_real_escape_string ($pass);

        $query = "select * from login where user = '{$user}'";
        $res = mysql_query ($query) or die ("Errore nell'esecuzione della query");
        while ($ris = mysql_fetch_array ($res , MYSQL_ASSOC))
        {
            $nick = $ris ['user'];
            $pwd = $ris ['pass'];
        }

        if ($user == $nick && md5 ($pass) == $pwd)
        {
            return true;
            mysql_close ($db);
        }
        else
            return false;
        mysql_close ($db);
    }
    else
        return false;
}
?>