$login->uname = isset($_POST['uname']) ? cstr($_POST['uname']) : '';
$login->pass = isset($_POST['pass']) ? cstr($_POST['pass']) : '';
$login->remember = isset($_POST['remember']) ? cint($_POST['remember']) : 0;

if (isset($_POST['login'])) {
    $err = array();
    $err['uname'] = !strlen(trim($login->uname)) ? 1 : 0;
    $err['pass'] = !strlen(trim($login->pass)) ? 1 : 0;

    if (!array_sum($err)) {
        $res = sql("SELECT usr_id FROM cms_users WHERE usr_uname = '". $login->uname ."' AND usr_pass = MD5('". $login->pass ."') AND usr_active = 'Y'");
        if ($row = sql_obj($res)) {
            $_SESSION['UID'] = $row->usr_id;
            if ($login->remember) setcookie('UID', $row->usr_id, time() + 2592000);
            location("/");
        } else $err['uname'] = 1;
    }
}