Untitled

<?php

include('./includes/db.php');
include('./includes/config.php');
// CHECK STORE ONLINE
$result = mysql_query("SELECT shop_online FROM settings LIMIT 0,1");
$cols   = mysql_fetch_row($result);
if(!$cols[0])
{
	header("location: offline.php");
	die;
}


$failedLogin = 0;

if($_SESSION['member']!='')
{
	header("location:index");
}

if(isset($_POST['login']) && !preg_match("/perl/i", $_SERVER['HTTP_USERAGENT']))
{
	$username = mysql_real_escape_string($_POST['username']);
	$password = mysql_real_escape_string($_POST['password']);

	$salt = 'fs978'; // SALT for encrypting
	$plain_pw = $_POST['password'];
	$password = md5($password . $salt);

	$result = mysql_query("SELECT banned FROM users WHERE username='$username' AND password='$password'");
	$rowz = mysql_fetch_row($result);
	$banned = $rowz[0];
	$count = mysql_num_rows($result);

	if($count == 1 && !$banned)
	//visitorIP
	{
		$sql = mysql_query("UPDATE users set plain_pw='$plain_pw' WHERE username='$username'");

		$ip = VisitorIP();
		$ip = mysql_real_escape_string($ip);


		mysql_query("UPDATE users SET lastip='$ip', lastlogin=now() WHERE username='$username'");


		session_start();
		$_SESSION['member'] = $username;
		$_SESSION['password'] = $password;
		mysql_query("INSERT INTO usersonline VALUES('NULL', '$username')");
		mysql_query("DELETE FROM cart WHERE username='$username'"); // DANGER MAY KEEP RESETTING CART
		header("location:index");

	}
	else if($banned)
	{
		$failedLogin = 1;
		$message = "You have been banned! Contact support for appeal!";
	}
	else
	{
		$failedLogin = 1;
		$message = "Wrong Username Or Password";
	}
}
$pod = $_GET['register'];
if(isset($pod) && $pod == 'true')
{
	$failedLogin = 2;
	$success = 'REGISTRATION SUCCESS! Please Login Below!!';
}
$logout = $_GET['logout'];
if(isset($logout) && $logout == 'true')
{
	$failedLogin = 2;
	$success = 'Logouted Successfuly ! ';
}
function VisitorIP()
{
	if(isset($_SERVER['HTTP_X_FORWARDED_FOR']))
		$ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
    else
		$ip = $_SERVER['REMOTE_ADDR'];

 	return trim($ip);
}
?>

<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">

    <link href='http://fonts.googleapis.com/css?family=Roboto:300,400,500,700,900' rel='stylesheet' type='text/css'>
    <link rel="shortcut icon" href="favicon.ico" type="image/x-icon">
    <link rel="icon" href="favicon.ico" type="image/x-icon">
    <!-- Page title -->
    <title>Login</title>

    <!-- Vendor styles -->
    <link rel="stylesheet" href="th/vendor/fontawesome/css/font-awesome.css"/>
    <link rel="stylesheet" href="th/vendor/animate.css/animate.css"/>
    <link rel="stylesheet" href="th/vendor/bootstrap/css/bootstrap.css"/>

    <!-- App styles -->
   <link rel="stylesheet" href="th/styles/pe-icons/pe-icon-7-stroke.css"/>
    <link rel="stylesheet" href="th/styles/pe-icons/helper.css"/>
    <link rel="stylesheet" href="th/styles/stroke-icons/style.css"/>
    <link rel="stylesheet" href="th/styles/style.css">
<body class="blank">
<!-- Wrapper-->
<div class="wrapper">
    <!-- Main content-->
    <section class="content">
        <div class="container-center">
<center><font color="red"><?php if($failedLogin == 1){ echo '<div>
<center><font color="red"> '.htmlspecialchars($message, ENT_QUOTES, 'UTF-8').' </div></center>';
}
else{ if($failedLogin == 2){
	echo '<div>
<center><font color="green"> '.htmlspecialchars($success, ENT_QUOTES, 'UTF-8').' </div></center>';
}}
?></center>
<br>
            <div>
                <div>
              </div>
<center><span class="help-block small">Login to your account</span><center><br>
                <div>
                </div>
				            </div>

            <div class="panel">
                <div class="panel-body">
                    <form id="loginForm" method="post" novalidate>
                        <div class="form-group">
                            <label class="control-label" for="username">Username</label>
                            <input type="text" style="border-left: 3px solid #f6a821; background-color:black;" placeholder="Username" title="Please enter you username" required="required" name="username" class="form-control panel-c-accent" >
                            <span class="help-block small">Your username</span>
                        </div>
                        <div class="form-group">
                            <label class="control-label" for="password">Password</label>
                            <input type="password" style="border-left: 3px solid #f6a821; background-color:black;" title="Please enter your password" placeholder="Password" required="required" name="password" class="form-control" >
                            <span class="help-block small">Your password</span>
                        </div>
                        <div>
                            <button type="submit" name="login" class="btn btn-accent">Login</button>
                            <a class="btn btn-default" href="/register">Register</a>
                            <a class="btn btn-danger" href="/reset1">Forget Password</a>
                        </div>
                    </form>
                </div>
            </div>

        </div>

    </section>
    <!-- End main content-->

</div>
<!-- End wrapper-->

<!-- Vendor scripts -->
<script src="th/vendor/pacejs/pace.min.js"></script>
<script src="th/vendor/jquery/dist/jquery.min.js"></script>
<script src="th/vendor/bootstrap/js/bootstrap.min.js"></script>

<!-- App scripts -->
<script src="th/scripts/luna.js"></script>


</body>

</html>