LOGIN.php

<?php

include 'includes/config.php';

if(isset($_POST['username']) && isset($_POST['password'])){

    $username = sec($_POST['username']);

    $password = sec($_POST['password']);

    $check = get_row("SELECT ID FROM users WHERE Name='$username' && Password='$password'");

    if(isset($check['ID'])){

        $banned = get_row("SELECT * FROM bans WHERE PlayerName='$username'");

        if(isset($banned['ID'])){

            if($banned['BanaP'] == 0){

                $err = 'Eºti banat permanent.';

            }else{

                $err = 'Eºti banat pânã la data de '.$banned['BanzP'].'.'.$banned['BanlP'].'.'.$banned['BanaP'].' '.$banned['BanoP'].':'.$banned['BanmP'];

            }

        }else{

            $_SESSION['username'] = $_POST['username'];

            $_SESSION['password'] = $password;

            mysql_query("UPDATE users SET rpgon=2 WHERE Name='$username'");

            header('location: profile.php');

        }


    }else{

        $err = 'Numele de utilizator ori parola incorecte.';

    }

}



include 'includes/header.php';



?>



<div class="main-content">

<div class="breadcrumbs" id="breadcrumbs">

<script type="text/javascript">

                        try{ace.settings.check('breadcrumbs' , 'fixed')}catch(e){}

                    </script>

<ul class="breadcrumb">

<li>

<i class="icon-home home-icon"></i>

<a href="index">Acasa</a>

</li>

<li class="active"><i class="icon-angle-right"></i>

Conectare

</li>

</ul>



<div class="nav-search" id="nav-search">

<form method="POST" action="searchplayer">

<span class="input-icon">

<input type="text" placeholder="Cauta jucator ..." name="username" id="username" type="submit" class="nav-search-input" autocomplete="on">

<i class="icon-search nav-search-icon"></i>

</span>

</form>

</div>



</div>

<div class="page-content">

<div class="row-fluid">

<div class="span12">

<center>

<form method="POST" action="login.php">

        <?php if(isset($err)): ?>

                <center><div class="alert alert-danger"><?=$err?></div></center>

        <?php endif; ?>

    <h2>Panou Utilizator Errored RPG</h2>



            Nume de utilizator:<br />

            <input type="text" id="username" name="username" /><br />

            Parola:<br />

            <input  id="password" type="password" name="password" /><br />

            <br />

            <input class="btn btn-inverse btn-large" type="submit" value="Conectare"><br /><br />

            <br>

            <br>

            <div class="hr hr8 hr"></div>

            <br>

</form>

</center>

</div><!-- this div closes span12-->

</div><!-- this div close row fluid -->

</div><!-- this div close page content-->

</div><!-- this div close main content-->