// New Script
	function login()
	{

		if(isset($_POST['login']))
		{
			$user = mysql_real_escape_string(preg_replace("@[^a-z0-9]@i","",$_POST['username']));
			$passw = mysql_real_escape_string($_POST['password']);
            $pass = sha1(strtoupper($_POST['username'].':'.$passw);

			$q = $this->db->select('*','account',"username = '$user' AND sha_pass_hash = '$pass'");
			if(mysql_num_rows($q) > 0)
			{
				$row = mysql_fetch_assoc($q);
				foreach($row as $c => $v)
				{
					$_SESSION[$c] = $v;
				}

// Old
	function login()
	{

		if(isset($_POST['login']))
		{
			$user = $_POST['username'];
			$pass = sha1(strtoupper($_POST['username'].':'.$_POST['password']));

			$q = $this->db->select('*','account',"username = '$user' AND sha_pass_hash = '$pass'");
			if(mysql_num_rows($q) > 0)
			{
				$row = mysql_fetch_assoc($q);
				foreach($row as $c => $v)
				{
					$_SESSION[$c] = $v;
				}