<?php

	include_once 'includes/db.php';
	include_once 'includes/errormsg.php';


   $uid = $_POST['uid'];
   $pwd = $_POST['pwd'];

   	$uid = stripslashes($uid);
	$pwd = stripslashes($pwd);
	$uid = mysql_real_escape_string($uid);
	$pwd = mysql_real_escape_string($pwd);

	$query = "SELECT * FROM users WHERE username = '$uid' AND password = '$pwd'";
	$result = mysql_query($query);

	$username = mysql_result($result,0,'name');

	if (isset($_POST[submit]) AND mysql_num_rows($result) == 1) {

        $_SESSION['uid'] = $uid;
	}

	if (!isset($_SESSION['uid'])) {
	?>
	<p>
	<form method="post" action="<?=$_SERVER['PHP_SELF']?>">
	<ul>
		<li><label for="login">Login:</label><input name="uid" id="uid" type="text" /></li>
		<li><label for="pwd">Password:</label><input name="pwd" id="pwd" type="password" /></li>
	</ul>
	<input type="submit" value="Log in" />
	</form>
	Not a user? Register<a href="registration.php">here</a>.
	</p>
	<?php
	}

	if(isset($_SESSION['uid'])) {
		print "<p>Hello $username , welcome to sharify!</p>";
		print "<a href='logout.php'>Logout</a>";
	}
?>