include ("config.inc.php");

mysql_select_db($database_nfconx, $nfconx);

// *** Validate request to login to this site.
session_start();

$loginFormAction = $_SERVER['PHP_SELF'];
if ((isset($_POST['accesscheck'])) && ($_POST['accesscheck'] <> "")) {
  $_SESSION['PrevUrl'] = $_POST['accesscheck'];
}

if (isset($_POST['username'])) {
  $loginUsername=strtoupper($_POST['username']);
  $password=$_POST['pwd'];
  $NF_fldUserAuthorization = "";
  $NF_redirectLoginSuccess = "index.php";
  $NF_redirectLoginFailed = "login.php?case=relogin";
  $NF_redirecttoReferrer = false;
  mysql_select_db($database_nfconx, $nfconx);
  $passpwd = $_POST['pwd'];
  $password = md5($passpwd);
  $LoginRS__query=sprintf("SELECT userid, password FROM users WHERE userid='%s' AND password='$password' AND status = 1",
    get_magic_quotes_gpc() ? $loginUsername : addslashes($loginUsername), get_magic_quotes_gpc() ? $password : addslashes($password));

  $LoginRS = mysql_query($LoginRS__query, $nfconx) or die(mysql_error());
  $loginFoundUser = mysql_num_rows($LoginRS);
  if ($loginFoundUser) {
  $login_datetime = current_datetime();
  $session_id = session_id();
  // Add to User Login History
  $insertSQL = "INSERT INTO user_login_history (userid, login_datetime, session_id, ip_address, browser, os, screen_resolution, screen_size) VALUES ('$loginUsername', '$login_datetime',  '$session_id', '$_POST[ip_address]', '$_POST[browser]', '$_POST[os]', '$_POST[screen_resolution]', '$_POST[screen_size]')";
//echo $insertSQL;

mysql_select_db($database_nfconx, $nfconx);
$Result1 = mysql_query($insertSQL, $nfconx);

     $loginStrGroup = "";

    //declare two session variables and assign them
    $GLOBALS['NF_Username'] = $loginUsername;

//register the session variables
    $_SESSION['NF_Username'] = $loginUsername;

    if ((isset($_SESSION['PrevUrl']) && ($_SESSION['PrevUrl'] <> ""))) {
      $NF_redirectLoginSuccess = $_SESSION['PrevUrl'];
    }
    header("Location: " . $NF_redirectLoginSuccess );
  }
  else {
    header("Location: ". $NF_redirectLoginFailed );
  }
} else {
 header("Location: ". $NF_redirectLoginFailed );
}
?>