<?php
    if ($_POST['login_admin'] != "") {
        $username = mysql_escape_string($_POST['username']);
        $password = md5(mysql_escape_string($_POST['password']));

        $sql = new mysql();
        $sql->query("SELECT * FROM `admins` WHERE `user` = '$username' and `pass` = '$password'");

        if ($sql->num_rows() != 0) {
            $_SESSION['admin_login'] = 1;
        }
        else {
            // login failed
        }
    }


    if ($_SESSION['admin_login'] == 0) {
        $core_site->display("admin/login.tpl");
    }
    else {
        if($core_site->parms['admin'][0] == "logout") {
            $_SESSION['admin_login'] = 0;
            redirect(HTTP."/admin");
        }
        else {
            $core_site->display("admin/dashboard.tpl");
        }
    }
?>