<?php
if(isset($_SESSION['id'])){
	echo "<meta http-equiv=refresh content=\"0\" />";
}else{
	if(isset($_POST['login'])) {
		$u = mysql_real_escape_string(stripslashes($_POST['username']));
		$p = mysql_real_escape_string(stripslashes($_POST['password']));
		$s = mysql_query("SELECT * FROM `accounts` WHERE `name`='".$u."'") or die(mysql_error());
		$i = mysql_fetch_array($s);

		if($i['password'] == hash('sha512',$p.$i['salt']) || sha1($p) == $i['password']){
			$userz = mysql_query("SELECT * FROM `accounts` WHERE `name`='".$i['name']."' AND `password`='".$i['password']."'") or die(mysql_error());
			$auser = mysql_fetch_array($userz);
			$_SESSION['id'] = $auser['id'];
			$_SESSION['name'] = $auser['name'];
			$gmammt = $gmlevel - 1;
			if($auser['gm'] > $gmammt){
				$_SESSION['gm'] = $auser['gm'];
			}
			<meta http-equiv="refresh" content="1">
		} else {
			$return = "Invalid username or password.";
		}
	}
		echo "
		<div class=\"regtext\">
			<form method=\"post\" action=''>
					<table border=\"0\" width=\"155\">
						<tr>
							<td>
								Username:
								<input type=\"text\" name=\"username\" maxlength=\"12\" />
							</td>
						</tr>
						<tr>
							<td>
								Password:
								<input type=\"password\" name=\"password\" maxlength=\"12\" />
							</td>
						</tr>
						<tr>
							<td align='center'>
								<input type=\"submit\" style=\"width:48%;\" name=\"login\" value=\"Login\" />
								".$return."
							</td>
						</tr>
					</table>
			</form>
		</div>";
}
?>