Untitled

<?php

session_start();
include('pages/config.php');

?>
<html>
<head>
<title>Små Godis 2</title>
</head>
<body>
<BODY OnLoad="document.loggain.user.focus();">
<body bgcolor="#333333">
<br><br><br><br><br><br><br><br><center><img src="images/headerphoto.jpg" width="120" height="150" class="no-border" />
<p>Välkommen till Små Godis 2. Logga in eller Gör en ny medlem</p>


<form action="index.php" method="post">
<input type="hidden" name="login" value="login" />
 Användarnamn:<br>
    <input type="text" name="username">
    <br>
    Lösenord:<br>
    <input type="password" name="password">
    <br>
    <input type="submit" name="submit" value="Logga in">

</form><a href=index.php>Logga in</a> • <a href=register.php>Bli medlem</a> • <a href=contact.php>Kontakta oss</a> • <a href=om.htm>Om sidan</a> • <a href=cookies.php>Cookies</a>
 </center>

<?php


$ip = $_SERVER['REMOTE_ADDR'];
$ip_sql = mysql_query("SELECT * FROM `ipblock` WHERE `ip` = '". $ip ."'") or die(mysql_error());
if (mysql_num_rows($ip_sql) >= 1)
{ echo 'Du är IP-blockerad från '. $sitename .'. Maila till '. $email .' om du har några frågor.'; exit; }

if (isset($_SESSION['username']))
{ header('Location: page.php?name=welcome'); }


if (isset($_POST['login']))
{

$username = mysql_real_escape_string($_POST['username']);
$password = mysql_real_escape_string($_POST['password']);
$sql = mysql_query("SELECT `id`, `username`, `access` FROM `members` WHERE `username` = '". $username ."' AND `password` = '". md5($password) ."'") or die(mysql_error());


if (mysql_num_rows($sql) != 0)
{

header('Location: page.php');
$info = mysql_fetch_array($sql);
$_SESSION['username'] = $info['username'];
$_SESSION['id'] = $info['id'];
$ip = $_SERVER['REMOTE_ADDR'];
mysql_query("UPDATE `members` SET `status` = '1', `last_login` = '". $current_date ."', `ip` = '". $ip ."' WHERE `id` = '". $info['id'] ."'") or die(mysql_error());

}

else
{ echo "<script type='text/javascript'> alert('Fel användarnamn eller lösenord.'); </script>"; }

}


$page_subject = 'Välkommen!';
$page_menu =
'
';

$design_sql = mysql_query("SELECT `folder` FROM `styles` WHERE `active` = '1'") or die(mysql_error());
$design = mysql_fetch_array($design_sql);


?>

</body>
</html>