Untitled

<?php
session_start();
if (isset($_SESSION['user'])) {
    header('Location: users/'.$_SESSION['user'].'/index.php'); // [user]
}
?>
<?php require_once('../Connections/uploader.php'); ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />

    <title>Login Page</title>

    <link rel="stylesheet" type="text/css" href="../nice_web_login/style.css" />
</head>

<body>

<?
function loginFormErrorsCheck ($loginUsername, $loginPassword) {
  if (empty($loginUsername) || empty($loginPassword)) {
    return true;
  } else {
    return false;
  }
}
?>
<?php
if(isset($_SESSION['user']))
{
    echo ("<p align='center'>If you are not automatically redirected, please click <a href='users/$_SESSION[user]/index.php'>here</a>.</p>");
}
?>
<?php
if(isset($noLogin)) {
    echo "<div class='error' style='text-align:center;'>Your session has timed out.  Please login again.<br><br></div>";
}
if(isset($closeBrowser)) {
    echo "<div class='noError'><img src='../Images/error_image.png' width='16' height='16' /> <b>Notice</b>: You were successfully logged out.  <em>Please close your browser to prevent others from accessing your account.</em></div><p>";
}
?>
<?php
if (isset($_POST['login'])) {

    $loginUsername = $_POST['uname'];
    $loginPassword = $_POST['pword'];

    $blank_fields = loginFormErrorsCheck ($loginUsername, $loginPassword);

    if (isset($blank_fields)) { }

    if (!$blank_fields) {
        $loginPassword = md5($loginPassword);

        mysql_select_db($database_uploader, $uploader);
        $query = "SELECT * FROM members WHERE uname='"
        . mysql_real_escape_string($loginUsername) .
        "' AND pword='" . mysql_real_escape_string($loginPassword) . "'";
        $result = mysql_query($query) or die(mysql_error());

        // make sure the username and password were found
        if (mysql_num_rows($result) > 0) {
            $row = mysql_fetch_array($result) or die(mysql_error());

            if ($loginUsername == "admin") { // Admin Login
                mysql_close($result);
                $_SESSION['admin'] = "Admin.";
                header('Location: users/admin/index.php');
                exit;
            }

            if ($row['acntStatus'] == 0) {  // If account is OK
            }
            else // If account is in bad standing
                {
                    $login_errors[]="<div class='error'><img src='../Images/error_image.png' width='16' height='16' /> <b>Error</b>: Your account has been temporarily/permanently disabled, or terminated. Please contact us for more details.";
                }

            if ($row['activated'] == 1) {
            }
            else {$login_errors[] = "<div class='error'><img src='../Images/error_image.png' width='16' height='16' /> <b>Error</b>: Your account is not yet activated.";}

            if ($row['activated'] == 1 && $row['acntStatus'] == 0)
            {
                $_SESSION['user'] = $loginUsername;
                mysql_close($result);
                header('Location: users/' . $row['uname'] . '/index.php');
                exit;
            }
        }
        else {$login_errors[] = "<div class='error'><img src='../Images/error_image.png' width='16' height='16' /> <b>Error</b>: Please check your User ID and Password, and try again.";}
    } else { $login_errors[] = "<div class='error'><img src='../Images/error_image.png' width='16' height='16' /> <b>Error</b>: Please fill in all fields.</div>";
    }
}
?>

<?php
if (isset($login_errors) && !empty($login_errors)) {
    $result = count($login_errors);

    for ($i=0; $i<$result; $i++) {
        echo "<p class='errors'>$login_errors[$i]<br></p>";
    }
}
?>
    <form id="login-form" action="" method="post">
        <fieldset>

            <legend>Log in</legend>

            <label for="login">User ID</label>
            <input type="text" name="uname" id="uname" value="<? if (isset($login_errors)) {echo $_POST['uname'];} ?>" />
            <div class="clear"></div>

            <label for="password">Password</label>
            <input name='pword' type='password' value="<? if (isset($login_errors)) {echo $_POST['pword'];} ?>" />
            <div class="clear"></div>

            <label for="remember_me" style="padding: 0;">Remember me?</label>
            <input type="checkbox" id="remember_me" style="position: relative; top: 3px; margin: 0; " name="remember_me" disabled="disabled"/>
            <div class="clear"></div>

            <br />

            <input type="submit" style="margin: -20px 0 0 287px;" class="button" name="login" value="Log in"/>
        </fieldset>
    </form>

</body>

</html>