<?php
include "../includes/config.php";
if(!isset($_COOKIE['admin'])){
    if(isset($_POST['submitted'])){
        $user = mysql_real_escape_string(stripslashes($_POST['user']));
        $pass = md5($_POST['pass']);
        $query = mysql_query("SELECT * FROM `users` WHERE `user` = '".$user."' AND `pass` = '".$pass."'") or die(mysql_error());
        if ($query) {
            $cookie = setcookie("admin", $user.$pass, time()+31556926, "/");
            echo "Login successful.";
            if($cookie) {
                echo "The cookie was set.<br />";
            } else {
                echo "The cookie was not set.";
            }
        } else {
            echo "There was an error when you tried to login. Please don't refresh the page. This may just be a fluke.";
        }
    } else {
        echo "<form action='' method='post'>
        Username: <input type='text' name='user' /><br />
        Password: <input type='password' name='pass' /><br />
        <input type='submit' name='login' value='Login' />
        <input type='hidden' name='submitted' value='true' />";
    }
} else {
    echo "You're already logged in.";
}
?>