<?php
if(empty($_SESSION['id'])){

	if(isset($_POST['login']) && $_POST['login'] == 'Logare') {

			((bool)mysqli_query($sqlServ, "USE account"));

		$username = sanitize(stripInput($_POST['user']));
		$password = sanitize(stripInput($_POST['pw']));

			$check = "SELECT * from account where login = '" . $username . "' and password = PASSWORD('$password')";
				$query = mysqli_query($sqlServ, $check);
					$num = mysqli_num_rows($query);



			if($num > 0) {

				$array = mysqli_fetch_array($query);

			// SESSION variable start //
			if($array['status']=='OK') {//daca contul nu este blocat
			$_SESSION['id'] = $array['login'];
			//$_SESSION['coins'] = $array['coins'];
			$_SESSION['email'] = $array['email'];
			$_SESSION['real_name'] = $array['real_name'];
			$_SESSION['social_id'] = $array['social_id'];
            $_SESSION['user_admin'] = $array['web_admin'];
			$_SESSION['user_id'] = $array['id'];
            $_SESSION['user_name'] = $array['login'];
            $_SESSION['user_coins'] = $array['coins'];
            $_SESSION['user_email'] = $array['email'];
			$_SESSION['fingerprint'] = md5($_SERVER['HTTP_USER_AGENT'] . 'x' . $_SERVER['REMOTE_ADDR']);
			//Selectare nume chat
			$BestChar = "SELECT player.name, player.level, player.exp, player.job
			FROM player.player
			WHERE player.account_id='".$_SESSION['user_id']."' ORDER BY player.level DESC, player.exp DESC Limit 1";
			$sql = mysqli_query($sqlServ, $BestChar);

			$check = mysqli_num_rows($sql);

			if ($check == 0) {
				$_SESSION['chat'] = $_SESSION['id'];
				$_SESSION['avatar'] = "user";
			}
			else {
				while($getBestChar = mysqli_fetch_object($sql)) {
					$_SESSION['chat'] = $getBestChar->name;
					$_SESSION['avatar'] = $getBestChar->job; }
			}
			//Selectare nume chat (sf)
			echo "<meta http-equiv='refresh' content='0; URL=index.php?page=home&teste=2'>"; }

			else if($array['status']=='BLOCK') {//daca contul este blocat
			echo'<div class="alert alert-danger" role="alert">
			Ne pare rău, dar contul tău este <strong>BLOCAT</strong>.
			</div>'; }
			} else {
			echo "<meta http-equiv='refresh' content='0; URL=index.php?page=login_error'>";
			}
		}

?>
<?php }
else { echo "<meta http-equiv='refresh' content='0; URL=index.php?page=home&teste=1'>";}
?>