<?PHP
#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|
#|                                                                        #|
#|         JabboCMS - Website and Content Management System               #|
#|         Copyright © 2011 Jor.dan. All rights reserved.                 #|
#|																		  #|
#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|#|

	include("./global.php");
	$pagename = "Accueil";
    $pageid = "index";
if(session_is_registered(username))
	{
		Redirect("".$url."/me");
	}

	$do = Securise($_GET['security']);

		if($do == "check")
			{
				if(isset($_POST['username']) && isset($_POST['password']))
					{
						$username = Securise($_POST['username']);
						$password = JabboHash($_POST['password']);

							if(empty($username) || empty($password))
								{
										$erreur = "Merci de remplir les champs vide.";
								}
							else
									{
										$sql = mysql_query("SELECT id,disabled FROM users WHERE username = '".$username."' AND password = '".$password."' LIMIT 1") or die(mysql_error());
										$row = mysql_num_rows($sql);
										$assoc = mysql_fetch_assoc($sql);

							if($row < 1)
									{
										$erreur = "Pseudo ou Mot de Passe invalide.";
									}
							else
									{

										if($assoc['disabled'] == 1)
											{
												$erreur = "Ton compte &agrave; &eacute;tait d&eacute;sactiv&eacute; par un Admnistrateur. En cas d'erreur de notre part merci de nous contacter &agrave; contact@<?PHP echo $sitename; ?>.fr";
											}
										else
										{
										$sql = mysql_query("SELECT * FROM bans WHERE value = '".$username."'");
										$b = mysql_fetch_assoc($sql);
										$row_ban = mysql_num_rows($sql);


									$stamp_expire = $b['expire'];
									if($stamp_now < $stamp_expire){
									$erreur = "Ton compte &agrave; &eacute;tait bannis pour la raison suivante:<br> <b>".utf8_decode($b['reason'])."</b>. Il expira le: <b>".$expire."</b>";
																} else {
									if($row_ban > 0) {
										mysql_query("DELETE FROM bans WHERE value = '".$username."'");
									}
										mysql_query("UPDATE users SET last_offline = '".FullDate('full')."' WHERE username = '".$username."'");
										$_SESSION['username'] = $username;
										$_SESSION['password'] = $password;
										Redirect("".$url."/me");
																		}
										}
									}

									}
					}
			}
?>