<?php // login.php :: Fonctions pour se loger et quitter.
header('P3P: CP="NON ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"');

define('PS', PATH_SEPARATOR);
define('DS', DIRECTORY_SEPARATOR);
define('ROOT_PATH', dirname(__FILE__) . DS);


switch($_GET['do']){
    case 'login':
        include('lib.php');
        $dbsettings = getConfig();
        $tableprefix = $dbsettings['prefix'];
        $pdo = openpdo();
        $link = opendb(); //COMPATIBILITÉ VIA EXT/MYSQL

        if (isset($_POST["submit_x"])) {
            $LOGIN = $pdo->prepare('SELECT * FROM '.$tableprefix.'_users WHERE username= :username AND password = :password LIMIT 1');
            $LOGIN->execute(array('username' => $pdo->quote($_POST['username'], PDO::PARAM_STR), 'password' => $pdo->quote(md5($_POST['password']), PDO::PARAM_STR)));
            $LOGIN->setFetchMode(PDO::FETCH_COLUMN);

            $login_results = $LOGIN->rowCount();

            if($login_results != 1){
                die("ID ou PW invalide, veuillez vous reloger avec vos bon identifiants.");
            }

            $row = $LOGIN->fetch();

            if (isset($_POST['rememberme'])) {
                $expiretime = time()+31536000;
                $rememberme = 1;
            } else {
                $expiretime = 0;
                $rememberme = 0;
            }
            $cookie = $row['id'] . ' ' . $row['username'] . ' ' . md5($row['password'] . '--' . $dbsettings['secretword']) . ' ' . $rememberme;
            setcookie('dkgame', $cookie, $expiretime, '/', '', 0);
            header('Location: index.php');
            die();

        }

        $page = gettemplate('login');
        $title = 'Bienvenue sur RPG illusion';
        display($page, $title, false, true, false);

    break;
    case 'logout':
        setcookie("dkgame", "", time()-100000, "/", "", 0);
        header("Location: login.php?do=login");
        exit;
    break;

    default:
        header('Location: login?do=login');
        exit;
    break;

}