<?php
session_start();
if (!isset($_SESSION['initiated']))
{
	session_regenerate_id();
	$_SESSION['initiated'] = true;
}
if (isset($_SESSION['HTTP_USER_AGENT']))
{
	if ($_SESSION['HTTP_USER_AGENT'] != md5($_SERVER['HTTP_USER_AGENT']))
	{
		echo ('its working fuck head but your not in the system1');
		exit();
	}
}
else
{
	$_SESSION['HTTP_USER_AGENT'] = md5($_SERVER['HTTP_USER_AGENT']);
}
$username = $_POST['username'];
$password = sha1(md5($_POST['password']));
require 'connect.php';
$username = mysql_real_escape_string($username);
$query = "SELECT password, salt
	FROM users
	WHERE username = '$username'";
$result = mysql_query($query);
if(mysql_num_rows($result) < 1) // no such user exists
{
		echo('its not working fuck head but your not in the system2');
		exit();
}
$userData = mysql_fetch_array($result);
if($password != $userData['password']) //incorrect password
{
		echo('its not working fuck head but your not in the system3');
		exit();
}
//login successful
else
{
	header('Location: loggedin.php');
}
?>