mysql_connect("$host","$user","$pass") or die(mysql_error());
mysql_select_db("$db") or die(mysql_error());

$copyyear = date("Y");



//LOGGING IN-USER\\
if(isset($_POST['action']) == "login"){
     //Defining special variables (username and password)
     $username = strtolower(mysql_real_escape_string($_POST['username']));
     $password = mysql_real_escape_string($_POST['password']);


     //Getting Information
     $sql = mysql_query("SELECT * FROM `user` WHERE `Id`='$username'") or die(mysql_error());
     $sqlly = mysql_fetch_assoc($sql);

     $sqlgme = mysql_query("SELECT * FROM `game` WHERE `Id`='$username'") or die(mysql_error());
     $sqllygme = mysql_fetch_assoc($sqlgme);

     $dbusername = strtolower($sqlly['Id']);
     $dbpassword = $sqlly['Password'];
     //Starting Verification Process
     if(!$password || !$username){die("<script>alert('Fill in all fields'); history.back();</script>");}

     if(!eregi("^[a-zA-Z0-9]*$", mysql_real_escape_string($_POST['username']))){
     die("<script>alert('Username must be alpha-numeric'); history.back();</script>");
     }

     if($username != $dbusername){die("<script>alert('Username not found'); history.back();</script>");}
    if($password != $dbpassword){die("<script>alert('Incorrect password'); history.back();</script>");}

     if (strlen($password)>16 || strlen($password)<4){die("<script>alert('Password must be between 4~16 characters'); history.back();</script>");}

     if (strlen($username)>16 || strlen($username)<4){die("<script>alert('Username must be between 4~16 characters'); history.back();</script>");}

     foreach($sqlly as $col=>$var){
    $_SESSION['user_'.$col] = $var;
    }

     foreach($sqllygme as $col=>$var){
    $_SESSION['game_'.$col] = $var;
    }

     }


// START Selecting Session Information ACC\\
$sqlmyaccg = mysql_query("SELECT * FROM `game` WHERE `Id`='".$_SESSION['user']."'") or die(mysql_error());
$sqllymyaccg = mysql_fetch_assoc($sqlmyaccg);

$sqlgmesnap = mysql_query("SELECT * FROM `gamesnapshot` WHERE `Id`='".$_SESSION['user']."'") or die(mysql_error());
$sqllygmesnap = mysql_fetch_assoc($sqlgmesnap);

$sqlmyaccus = mysql_query("SELECT * FROM `user` WHERE `Id`='".$_SESSION['user']."'") or die(mysql_error());
$sqllymaccus = mysql_fetch_assoc($sqlmyaccus);

$sqlcashu = mysql_query("SELECT * FROM `cash` WHERE `Id`='".$_SESSION['user']."'") or die(mysql_error());
$sqllycashu = mysql_fetch_assoc($sqlcashu);
//END Selecting Session Information\\

//GET ONLINE INFORMATION\\
/* Server Status */
function check_status($ip,$port) {

$fp = @fsockopen($ip, $port, $errno, $errstr, 2);

if(!$fp) {
return 0;
} else {
return 1;
}}

//Set up your server IP
$ip = '127.0.0.1';

$statarray = array(
'Broker' => check_status($ip, 8372),
);

foreach($statarray as $keydef => $valuedef) {
   if($valuedef > 0) {
      $serverstatus = "<font color='geen'>Online</font>";
   } else {
      $serverstatus = "<font color='red'>Offline</font>";
   }
}
$onlineusers = mysql_fetch_row(mysql_query("SELECT COUNT(*) FROM `currentuser`"));
/* Ending Server Status */
if ($onlineusers[0]>1 OR $onlineusers[0]==0) {
$playerenglish = "Players";
} else {
$playerenglish = "Player";
}

$numberusers = mysql_fetch_row(mysql_query("SELECT COUNT(*) FROM `game`"));
$numberdonor = mysql_fetch_row(mysql_query("SELECT COUNT(*) FROM `user` WHERE `Authority` = '2'"));
$websql = mysql_query("SELECT * FROM `web_boards`") or die(mysql_error());
$websqlly = mysql_fetch_assoc($websql);
//END GETTING ONLINE INFORMATION\\
?>