<?php
session_start();
if (!empty($_POST)) {
	$userAttempt = $_POST['username'];
	$passAttempt = $_POST['password'];
	$con = mysql_connect("bel.sunderland.ac.uk","bg15oq","U08031993");

	if (!$con) {
		die('Could not connect: ' . mysql_error());
	}

	mysql_select_db("bg15oq", $con);
	$result = mysql_query("SELECT * FROM users WHERE username = '$userAttempt'");
	$row = mysql_fetch_array($result);
	$username = $row['username'];
	$password = $row['password'];
	$salt = $row['salt'];
	if(md5($passAttempt . $salt) == $password) {
		$_SESSION['LoggedIn'] = true;
	}

	if(isset($_SESSION['LoggedIn']) && $_SESSION['LoggedIn'] == true) {
		echo "Welcome, " . $username . "!<br />";
		echo "<a href='index.php'>Return to Index</a>";
	} else {
		echo "Invalid Username/Password.<br />";
		echo "<a href='login.php'>Return to Login</a>";
	}
	mysql_close($con);
} else {
?>
<h1>Add New Request</h1>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
Username: <input name="username" type="text" id="username" /><br />
Password: <input name="password" type="password" id="password" /><br />
<input type="submit" name="Submit" value="Login" />
</form>
<a href='index.php'>Return to Index</a>
<?php } ?>