Untitled

<?


//--------------------------------standard values---------------------------------------------\\

	include ("dbc.php");
	$adr = $_SERVER['REMOTE_ADDR'];
	$date = date("y-m-d");
	$date2 = date("d");
	$login_page = "login.php";
	$status = "Log-in";
	$_pw = $_POST['_pw'];
	$_user = $_POST['_user'];
	$submit = $_POST['submit'];

//--------------------------------standard values---------------------------------------------\\

//--------------------------------checking for retries---------------------------------------------\\

				$sql = "SELECT _retries
				FROM _false_logins
				WHERE _ip_address = '$adr'";
				$resultaat = mysql_query($sql) or die ("Something went wrong with the system please contact the administrator. " . mysql_error());
				$row = mysql_fetch_array($resultaat);

				if($row[_retries] > 5)
				{
					$sql = "UPDATE _false_logins
					SET _ban_time = '$date'
					WHERE _ip_address = '$adr' ";
					mysql_query($sql) or die ("query failed");
					$submit = "0";
				}
//--------------------------------checking for retries---------------------------------------------\\

//--------------------------------ban check---------------------------------------------\\
	$sql =
	"SELECT _ban_time
	FROM _false_logins
	WHERE _ip_address = '$adr'";
	$resultaat = mysql_query($sql)
	or die("Something went wrong with the system please contact the administrator. " . mysql_error());
	$row = mysql_fetch_array($resultaat);

	if(date("y-m-d", time()-86400) < $row[_ban_time])
	{
//--------------------------------ban check---------------------------------------------\\

//--------------------------------deleting retries---------------------------------------------\\

	$sql =
	"UPDATE _false_logins
	SET _retries = '0'
	WHERE _ip_address = '$adr'";
	mysql_query($sql) or $status = "Failed to delete retries";
	$submit = "0";
	$status = "Probeer na 00:00 nog eens in te loggen. tot die tijd ben je verbannen";
	}

//--------------------------------deleting retries---------------------------------------------\\


//--------------------------------checking if form is filled---------------------------------------------\\
	if($submit == 1)
	{
//--------------------------------checking if form is filled---------------------------------------------\\

//--------------------------------log in check---------------------------------------------\\

		$sql = "SELECT *
		FROM _users
		WHERE _user = '$_user' ";
		$resultaat = mysql_query($sql) or $status = "Deze pagina is momenteel niet beschikbaar voor gebruik. ";
		$row = mysql_fetch_array($resultaat);

		$pass = $_pw;
		var_dump($row[_pw]);
		var_dump($pass);
		if (!$pass){
		$pass = "xonjuistx";
		}
		if($pass == $row[_pw] AND $_user == $row[_user])
			{
				$sql =
				"UPDATE _false_logins
				SET _retries = '0'
				WHERE _ip_address = '$adr'";
				mysql_query($sql) or $status = "Failed to delete retries";
				$status = "Welkom $_user";

				session_start();
				$sid2 = session_id();
				$_SESSION['login']= 1;
				$_SESSION['sid']= $sid2;
				$_SESSION['ipadr']= $adr;

				$sql = "INSERT INTO logins (sesid, ipadr, tijd) VALUES ('$sid2', '$adr', '$date2')";
				mysql_query($sql) or $status = "Oops, er ging iets mis!";
				echo "<head><meta http-equiv=refresh content=\"1; URL=index.php\"></head>";
			}
				else
			{
//--------------------------------checking if user already retried---------------------------------------------\\
					$sql = "SELECT *
					FROM _false_logins
					WHERE _ip_address = '$adr' ";
					$resultaat = mysql_query($sql) or $status = "Deze pagina is momenteel niet beschikbaar voor gebruik. ";
					$row = mysql_fetch_array($resultaat);
					if($row[_ip_address] == NULL)
//--------------------------------checking if user already retried---------------------------------------------\\

//--------------------------------adding ip to db---------------------------------------------\\
					{
						$status = "Toegang geweigerd!";
						$sql =
						"INSERT INTO _false_logins (_ip_address, _retries)
						VALUES ('$adr', '1')";
						mysql_query($sql) or $status = "Something is wrong please contact the administrator. ";

					}

//--------------------------------adding ip to db---------------------------------------------\\

					else

//--------------------------------updating retry---------------------------------------------\\
					{
						$status = "Toegang geweigerd!";
						$sql = "UPDATE _false_logins
						SET _retries = _retries +1
						WHERE _ip_address = '$adr' ";
						mysql_query($sql) or $status = "Something is wrong please contact the administrator. ";
 					}

//--------------------------------updating retry---------------------------------------------\\

//--------------------------------log in check---------------------------------------------\\


		}
	}


?>

<html>
<head>
<title>Riddim log in</title>
<LINK REL=stylesheet HREF="text.css" TYPE="text/css">
</head>

<body bgcolor="#80825f"><table width="100%" height="100%" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td align="center" valign="middle">
		<table width="518" height="157" border="0" cellspacing="0" cellpadding="0" align="center">
  		<tr>
    		<td align="center" valign="top" class="text">
				<form action="<? echo "$login_page" ?>" method="post"><input type="hidden" value="1" name="submit"><table width="100%" border="0" cellspacing="0" cellpadding="0">
 				 <tr>
        			  <td align="center" class="text" height="35"></td>
  				 </tr>
				 <tr>
        			  <td align="center" class="text">Login:  <input class="bg" type="text" name="_user"></td>
  				 </tr>
  				 <tr>
    				  <td align="center" class="text">Password:  <input class="bg" type="password" name="_pw"></td>
  				 </tr>
   				 <tr>
    				  <td align="center" class="text">  <input class="bg2" type="submit" value="Log-in"></td>
  				 </tr>
				  <tr>
    				  <td align="center" class="text"><? echo "$status"; ?></td>
  				 </tr>
				</table></form>

		   </td>
  		</tr>
		</table>
	</td>
  </tr>
</table>


</body>
</html>