<?php
session_start();
require('config.php');

if($_POST['submit'])
{
	$query="select * from tb_user where user_name='".addslashes($_POST['username'])."' and password='".addslashes($_POST['password'])."'";
	$login=mysql_query($query);
	if(mysql_num_rows($login)>0)
	{
		$userData=mysql_fetch_object($login);
		$_SESSION['userid']=$userData->id;
		$_SESSION['deptid']=$userData->dept_id;
		$_SESSION['usertype']=$userData->user_type;
		header("Location: index.php");
	}
	else
	{
		header("Location: login.php?msg=error");
	}
}

?>
<?php
if($_GET['msg'])
	{
		echo '<span style="color:red">Invalid username or password</span>';
	}
?>

<form method="post" onSubmit="return validate()">
Username:<input type="text" name="username" value="" id="username"></input><div class=error id=nameError style="display:none">Enter Username</div><br>
Password:<input type="password" name="password" value="" id="password"></input><div class=error id=passError style="display:none">Enter Password</div><br>
<input type="submit" value="Login" name="submit"></input>

</form>
<?php

?>
<script type="text/javascript">
function validate()
{
	uname=document.getElementById("username").value
	password=document.getElementById("password").value
	hideallerrors();
	if(uname=="")
	{
		document.getElementById("nameError").style.color="red";
		document.getElementById("nameError").style.display = "inline";
		document.getElementById("username").select();
		document.getElementById("username").focus();
		return false;
	}
	else if(password=="")
	{

		document.getElementById("passError").style.color="red";
		document.getElementById("passError").style.display = "inline";
		document.getElementById("password").select();
		document.getElementById("password").focus();
		return false;
	}
	else
	{
		return true;
	}
}
function hideallerrors()
{
		document.getElementById("nameError").style.display = "none";
		document.getElementById("passError").style.display = "none";

}
</script>