<?php

if ($_POST["login"]) {
    $name = $_POST["Name"];
    $pass = $_POST["Passwort"];

    $query = 'SELECT * FROM `account` WHERE Name="'.mysql_escape_string($name).'"';
    $result = mysql_query($query);
    if (!$result || mysql_num_rows($result) == 0) {
        echo '
    <div class="box-top"></div>
          <div class="box">
            <div class="box-padding">
              <h2>.: Login</h2>
            <br>
            <p>Dieser Account wurde leider nicht gefunden. <br><a href="index.php">Nocheinmal versuchen</a></p>
              <div class="clearboth"></div>
            </div>
          </div>
          <div class="box-bottom"></div>
        ';
    }
    else
    {
        $row = mysql_fetch_assoc($result);
        if ($row["Passwort"] == md5($pass)) {
            session_start();
            $_SESSION["Username"] = $name;
            $_SESSION["Name"] = $row["Name"];
            $_SESSION["Stunden"] = $row["Stunden"];
            $_SESSION["Minuten"] = $row["Minuten"];
            $_SESSION["Wins"] = $row["Wins"];
            $_SESSION["Status"] = $row["status"];
            $_SESSION["Geld"] = $row["Geld"];
            $_SESSION["Clan"] = $row["Clan"];
            $_SESSION["Warns"] = $row["Warns"];
            $_SESSION["Adminlevel"] = $row["Adminlevel"];
            echo '
            <div class="box-top"></div>
                        <div class="box">
                       <div class="box-padding">
                               <h2>.: Login</h2>
                        <br>
                <p>Sie haben sich erfolgreich eingeloggt!<br><a href="index.php">Klicken sie hier um Fortzufahren</a></p>
                              <div class="clearboth"></div>
                      </div>
                 </div>
                      <div class="box-bottom"></div>    ';
        }
        else {
            echo '
                <div class="box-top"></div>
                         <div class="box">
                        <div class="box-padding">
                                 <h2>.: Login</h2>
                            <br>
                            <p>Sie haben ein falsches Passwort eingegeben!<br><a href="index.php">Nocheinmal versuchen</a></p>
                              <div class="clearboth"></div>
                      </div>
                 </div>
                      <div class="box-bottom"></div>
            ';
        }
    }
}
else
{
    echo '
    <div class="box-top"></div>
          <div class="box">
            <div class="box-padding">
              <h2>.: Login</h2>
                <br>
                <form action="index.php?action=login" method="POST">
                    <fieldset style="padding:10px">
                        <div align="left">
                            <font style="color:white;"><b>Logindaten angeben:</b></font>
                            <br>
                            <br>
                                <font style="color:white;">Name:</font>
                            <br>
                            <input type="text" name="Name" /><br />
                                <font style="color:white;">Passwort: </font>
                            <br>
                            <input type="password" name="Passwort" /><br />
                            <br>
                            <br>
                            <font style="color:white;font-size:10pt;"><b>Falls sie keinen Account besitzen, müssen sie sich auf dem Raceserver registrieren.</b></font>
                            <br>
                            <br>
                            <input type="submit" name="login" value="Einloggen" size=40>
                            <br>
                            <br>
                        </div>
                    </fieldset>
                </form>
              <div class="clearboth"></div>
            </div>
          </div>
          <div class="box-bottom"></div>';
}
?>