<?php
session_start();
ini_set('session.gc_maxlifetime', 3000000);

include '../includes/include.php';

$login = $_POST['username'];
$pwd = $_POST['password'];
$remem = $_POST['remem'];
$now = (date('Y-m-d H:i:s'));

if($login == NULL || $pwd == NULL){

header('Location: ../login.php?&m=1');

}else{
        $login_num = strlen($login);
        if($login_num == 3){
        $login = AFR.$login;
        }
        if(filter_var($login, FILTER_VALIDATE_EMAIL) == true){
        $query = mysql_query("SELECT * FROM pilots where email='$login' AND stat                                                                                                                                                             us != '4'");
        } else {
        $query = mysql_query("SELECT * FROM pilots where login='$login' AND stat                                                                                                                                                             us != '4'");
        }

        $user_count = mysql_num_rows($query);
        $user = mysql_fetch_assoc($query);

        if(password_verify("$pwd", $user[password])){
        $_SESSION['afr_ops'] = $user['id'];
        if ($remem == 0) {
        $_SESSION['afr_ops_time'] = time() + 10800;
        } else
        if ($remem == 1) {
        $_SESSION['afr_ops_time'] = time() + 2592000;
        }
        mysql_query("UPDATE pilots SET lastip='$_SERVER[REMOTE_ADDR]', lastlogin                                                                                                                                                             ='$now' WHERE id='$user[id]'");

header('Location: ../index.php');

} else {

header('Location: ../login.php?&m=2');
}
}