<?php



	session_start();


	require_once('config.php');
	require_once('functions.php');


	$errmsg_arr = array();


	$errflag = false;


	$link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD);
	if(!$link) {
		die('Failed to connect to server: ' . mysql_error());
	}


	$db = mysql_select_db(DB_DATABASE);
	if(!$db) {
		die("Unable to select database");
	}



	$login = clean($_POST['login']);
	$password = clean($_POST['password']);


	if($login == '') {
		$errmsg_arr[] = 'Login ID missing';
		$errflag = true;
	}
	if($password == '') {
		$errmsg_arr[] = 'Password missing';
		$errflag = true;
	}


	if($errflag) {
		$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
		session_write_close();
		header("location: index.php");
		exit();
	}


	$qry="SELECT * FROM users WHERE username='$login' AND userpw='".md5($_POST['password'])."'";
	$result=mysql_query($qry);


	if($result) {
		if(mysql_num_rows($result) == 1) {

			session_regenerate_id();
			$member = mysql_fetch_assoc($result);
			$_SESSION['SESS_MEMBER_ID'] = $member['userid'];
			$_SESSION['SESS_FIRST_NAME'] = $member['username'];
				session_write_close();
							header("location: index.php");
			exit();
		}else {

			header("location: index.php?login=failed");
			exit();
		}
	}else {
		die("Query failed");
	}
?>