<?php

  if($_SESSION["signed"] == 1)
  {
    header("Location: /".$_SESSION["city"]."/");
  }

  if(isset($_POST['login']))
    {
      $username = $_POST['user'];
      $city = $_POST['city'];
      $password = md5($_POST['pass']);

      $query = "SELECT * FROM ".$this_city->mysql_tbl." WHERE Name = '$username' LIMIT 1";

      $res = $this_city->mysql->query($query);
      $row = mysql_fetch_object($res);

      if($username != "" && $password != "" && mysql_num_rows($res) == 1 && $row->Pass == $password && $row->Name == $username)
          {
          $_SESSION["user"] = $username;
          $_SESSION["signed"] = 1;
          $_SESSION["city"] = $city ;

          ?>
          <div id="logfeld">
          <!--Der Login war erfolgreich.<br><a href="site.php">>> City <<</a>-->
          </div>
<?php
          }
        else
          {
          ?>
          <div id="logfeld">
            Login not successful.
          </div>
<?php
          }

    }
  else
    {
    ?>
      <div id="logfeld">
        <p>Login</p>
          <form action="" method="post">
            <table>
              <tr>
                <td>Accountname: </td>
                <td><input type="text" maxlength="30" name="user" id="user"></td>
              </tr>
              <tr>
                <td>Password: </td>
                <td><input type="password" maxlength="30" name="pass" id="pass"></td>
              </tr>
              <tr>
                <select name="city" size="3">
<?php
                  foreach($cities as $act_city) {

                  ?>
                  <option value="<?=$act_city->short?>"><?=$act_city->name?></option>
<?php

                  }
?>
                </select>
              <tr>
                <td></td>
                <td style="text-align:center;"><input type="submit" value="Login" name="login" id="btn"></td>
              </tr>
             </table>
          </form>
      </div>
<?php
    }

?>