<script type="text/javascript">
    function clearText(thefield){
        if (thefield.defaultValue==thefield.value)
        thefield.value = ""
    }
</script>

<?php
$ip = $_SERVER['REMOTE_ADDR'];
$hip = md5($ip);
$file = $hip.".txt";

setlocale(LC_ALL, 'fi_FI'); $show_time = date("jS F Y H:i");
echo '<div id="header"><span id="navtop"></span><table class="table" width="99%" border="0" cellspacing="0" cellpadding="0"><tr><td style="font-weight:bold;font-size:10px;" align="left">'.$show_time.'</td>';


if ( file_exists("../$file") ) {
    $login_info = explode("|", file_get_contents("../$file"));
    $cookie = $login_info[2];
    if ( isset($cookie) ) {
        $acctype = $login_info[1];
        $logged_user = $login_info[0];
        session_start();
        session_register("sess_tunnus");
        $_SESSION["sess_tunnus"] = $login_info[0];
        session_register("sess_iposoite");
        $_SESSION["sess_iposoite"] = $_SERVER["REMOTE_ADDR"];
        echo '<td style="font-weight:bold;font-size:10px;" align="right">Logged in as'." $logged_user (<font color=\"orange\">$acctype</font>) ".'| <a href="index.php?logout=1">LOGOUT</a>';
    }
    else { @unlink("../$file"); }
}

else {
    echo '<form name="loginform" method="post" action="index.php?login=1">
    <td align="right">
    <input type="text" style="font-size:9px;border:solid 1px #444;padding-left:2px;color:#444;" value="Username" name="user" onfocus="clearText(this)">
    <input type="password" style="font-size:9px;border:solid 1px #444;padding-left:2px;color:#444;" value="password" name="pass" onfocus="clearText(this)">
    <input style="font-size:9px;border:solid 1px #444;color:#444;" name="submit" type="submit" value="Login" />
    </td></tr></table>
    </form>';
}

if ( $_GET['login'] == "1" ) {
    $user = $_POST['user'];
    $pass = md5($_POST['pass']);
    $go_to = $_SERVER['HTTP_REFERER'];

    //Admin
    $user1_n = "Masaz";
    $user1_p = "e173812278f9ba23e6fa2a6d34ba5e8b";

    //Guest user
    $user2_n = "Guestzor";
    $user2_p = "9bbf696a35f34f6a6c130d4f8360a2a3";

    echo '<table class="table" width="99%" border="0" cellspacing="0" cellpadding="0"><tr><td style="font-weight:bold;font-size:10px;" align="left">'.$show_time.'</td>';

    if ( $user1_n == $user && $user1_p == $pass ) {
        $acctype = "Admin";
        $logged_user = "Masaz";
        session_register("sess_tunnus");
        $_SESSION["sess_tunnus"] = $logged_user;
        session_register("sess_iposoite");
        $_SESSION["sess_iposoite"] = $_SERVER["REMOTE_ADDR"];
        $login = "2";
    }

    elseif ( $user2_n == $user && $user2_p == $pass ) {
        $acctype = "Guest";
        $logged_user = "Guestzor";
        session_register("sess_tunnus");
        $_SESSION["sess_tunnus"] = $logged_user;
        session_register("sess_iposoite");
        $_SESSION["sess_iposoite"] = $_SERVER["REMOTE_ADDR"];
        $login = "2";
    }

    else {
        echo '<td style="font-weight:bold;font-size:10px;" align="right"><font color="red">! Wrong username or password !</font> Try <a href="index.php">again</a>?';
    }

    if ( $login == "2" && $_SESSION["sess_tunnus"] != "" && $_SESSION["sess_iposoite"] == $_SERVER["REMOTE_ADDR"] ) {
        touch("../$file");
        chmod("../$file", 0777);

        $cookie_date = date("ymdHis");
        $cookie = md5($ip.$cookie_date);
        setcookie($cookie, $cookie, time()+86400, "koti.mbnet.fi/monster1/boxed/", "MBNet - Monster1", 1);

        $fh = fopen("../$file", 'w+') or die("Can't open file");
        $write_this = $logged_user."|".$acctype."|".$cookie;
        fwrite($fh, $write_this);
        fclose($fh);
        echo '<td style="font-weight:bold;font-size:10px;" align="right">Logged in as'." $logged_user (<font color=\"blue\">$acctype</font>) ".'| <a href="index.php?logout=1">LOGOUT</a>';
    }

    header("location:$go_to");
}

if ( $_GET['logout'] == "1" ) {
    session_unregister("sess_tunnus");
    session_unregister("sess_iposoite");
    @unlink("../$file");
    unset($_COOKIE[$login_info[2]]);
    header("location:index.php");
}
echo '</td></tr></table></div>';
?>