<?php
	require_once('conf/sql.php');

$user=trim(htmlspecialchars(mysql_real_escape_string($_POST['username'])));
$pass=trim(htmlspecialchars(mysql_real_escape_string($_POST['pass'])));

$query = mysql_query("SELECT * FROM  user WHERE name = '".$_POST['user']."' AND pass = '".sha1($_POST['pass'])."'");

if(mysql_fetch_assoc($query))
	{
	$key_supply = "0123456789qwertzuiopasdfghjklyxcvbnm";
	for($i=0;$i<50;++$i)
		 $rsa.=$key_supply{rand(0, strlen($key_supply))};
	mysql_query("UPDATE users SET key='".$rsa."'");
	setcookie("rsa", $rsa, time()+604800, "/");
	header("Location:a_index.php");
	}

else {
		echo "nem vagy bejelentkezve";
	}

?>