<?

$msg;
if (isset($_POST['uname']))
 {

$msg="";
if($_POST['uname']==""){
$msg.="<br />User Name cannot be left empty!<br />";}
if($_POST['pass']==""){
$msg.="<br />Password cannot be left empty!<br />";}

else {

$po_uname=check_input($_POST['uname']);
$po_pass=md5($_POST['pass']);

$query =sprintf("select * from users where username='$po_uname' and password='$po_pass'");
    $result = mysql_query($query);
    if(mysql_num_rows($result) ==0) {
    $msg.="Wrong login details entered!";
    @mysql_close();
    }

else {
    while ($row = mysql_fetch_assoc($result)) {
            $auth_id=$row['userid'];
            $auth_gid=$row['usergid'];
            $auth_name=$row['username'];
            $auth_pass=$row['password'];
            $auth_status=$row['status'];
    }
    if($auth_status == '0') {
    $msg.="This account is not active, Please activate the account first!";
    @mysql_close();
    }

        if($auth_status == '2') {
    $msg.="This account is suspended by site admin!";
    @mysql_close();
    }

    if($auth_status == '1') {
           session_start();
        $_SESSION['userid']=$auth_id;
        $_SESSION['usergid']=$auth_gid;
        $_SESSION['username']=$auth_name;
        $_SESSION['password']=$auth_pass;
        $_SESSION['status']=$auth_status;

        @mysql_close();
        if(isset($_POST['remember'])){
            setcookie("cookname", $auth_name, time()+60*60*24*30, "/");
            setcookie("cookpass", $auth_pass, time()+60*60*24*30, "/");
        }

    header("Location: myimages.php");
    exit;
    }



}

}

 } // if post

?>

<center>
<?if(isset($msg)){?>
<div id="error"><span class="error"><?=$msg?></span></div>
<?}?>

<form name="config" action="<?= $_SERVER['PHP_SELF'] ?>" method="post" style="margin-top: 0px; margin-bottom: 0px;" onSubmit="return validate();">
Usuario:<br />
<input type="text" name="uname" id="uname" value="<?if(isset($po_uname)){echo("=".$po_uname);}?>" maxlength="20"><br />
Contrase\F1a:<br />
<input type="password" name="pass" value="<?if(isset($po_pass)){echo("=".$po_pass);}?>" maxlength="32"><br />
<br />
<input type="checkbox" name="remember">
<font size="2">Recordarme<br /><br />
<input type="submit" value="Entrar" type="submit">
<br /><br />
<a href="forgotpass.php">\BFOlvid\F3 su Contrase\F1a?</a>
<br /><br /><br /><br />

</center>

</form>