<?php



	session_start();


	require_once('config.php');
	require_once('functions.php');


	$errmsg_arr = array();


	$errflag = false;


	$link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD);
	if(!$link) {
		die('Failed to connect to server: ' . mysql_error());
	}


	$db = mysql_select_db(DB_DATABASE);
	if(!$db) {
		die("Unable to select database");
	}



	$login = clean($_POST['login']);
	$password = clean($_POST['password']);


	$qry="SELECT * FROM users WHERE username='$login' AND userpw='".md5($_POST['password'])."'";
	$result=mysql_query($qry);


	if($result) {
		if(mysql_num_rows($result) == 1) {

			session_regenerate_id();
			$member = mysql_fetch_assoc($result);
			$_SESSION['SESS_MEMBER_ID'] = $member['userid'];
			$_SESSION['SESS_FIRST_NAME'] = $member['username'];
			session_write_close();
			echo 'ok';
		}
	} else die("Query failed");
?>