<?PHP

require_once("c:\dbconnect\dbconnect.php");

if($HTTP_POST_VARS['username'] != "" && $HTTP_POST_VARS['password'] !=
""){$HTTP_POST_VARS['password'] = md5($HTTP_POST_VARS['password']);

    $dataquery = "SELECT user_id, username, password, userlevel FROM news_users
                  WHERE username='$HTTP_POST_VARS[username]'
                  AND password='$HTTP_POST_VARS[password]'";
    $int = mysql_query($dataquery)
                        or die (mysql_error());
    $data = mysql_fetch_array($int);

if(($data['username'] == $HTTP_POST_VARS['username']) &&
   ($data['password'] == $HTTP_POST_VARS['password'])){
        session_register('userid');
        session_register('username');
        session_register('userlevel');
        session_register('owner_logged_in');
        session_register('admin_logged_in');
        session_register('super_logged_in');
        session_register('regular_logged_in');
        session_register('miniprofile');

        $_SESSION['userid'] = $data['user_id'];
        $_SESSION['username'] = $data['username'];
        $_SESSION['sn_user'] = $data['username'];
        $_SESSION['userlevel'] = $data['userlevel'];
        $_SESSION['miniprofile'] = $action['miniprofile'];

        if($data['userlevel'] == "owner"){
            $_SESSION['owner_logged_in'] = "yez";
            $_SESSION['admin_logged_in'] = "yez";
            $_SESSION['super_logged_in'] = "yez";
            $_SESSION['regular_logged_in'] = "yez";
            echo "<script>location.href='../../menus/menu.php'</script>";
        }
         elseif($data['userlevel'] == "admin"){
            $_SESSION['admin_logged_in'] = "yez";
            $_SESSION['super_logged_in'] = "yez";
            $_SESSION['regular_logged_in'] = "yez";
           /* echo "<script>location.href='../../index.php'</script>";*/
           echo "<script>location.href='../../menus/menu.php' </script>";
        }
        elseif($data['userlevel'] == "super"){
            $_SESSION['super_logged_in'] = "yez";
            $_SESSION['regular_logged_in'] = "yez";
            echo "<script>location.href='../../index.php'</script>";
        }
        elseif($data['userlevel'] == "regular"){
            $_SESSION['regular_logged_in'] = "yez";
            echo "<script>location.href='../../menus/menu.php'</script>";
        }

        }
        else
            session_destroy();
            echo "<script>history.back();</script>";
        }
        else
        {
        if($HTTP_POST_VARS['username'] == ""){

        echo "mangler brukernavn";
        /*echo "<script>location.href='../../index.php?mode=login&username=none'</script>"; */
        }
        elseif($HTTP_POST_VARS['password'] == ""){
        echo "mangler passord";
        /*echo "<script>location.href='../../index.php?mode=login&password=none'</script>"; */
    }
      if($HTTP_POST_VARS['miniprofil'] == "yez")
      {

        echo "<script>location.href='../../index.php?mode=login&username=none'</script>";
        }
        elseif($HTTP_POST_VARS['password'] == ""){
        echo "<script>location.href='../../index.php?mode=login&password=none'</script>";
    }
}

?>