<?php
session_start();
$connect = mysql_connect("db4free.net", "waveboz", "");
mysql_select_db("waveboz", $connect);


if(!($_SESSION['session_id']))
{

if(isset($_POST['pseudo']))
{
	$pseudo = mysql_real_escape_string($_POST['pseudo']);
	$mdp = mysql_real_escape_string($_POST['mdp']);

	$sql = mysql_query("SELECT * FROM users WHERE username='".$pseudo."' AND password='".$mdp."'");

	if(mysql_num_rows($sql) > 0)
	{
		$data = mysql_fetch_assoc($sql);
		$_SESSION['session_id'] = md5(sha1(md5($mdp)));
		mysql_query("INSERT INTO sessions(session_id, session_user_id) VALUES ('".$_SESSION['session_id']."', '".$data['user_id']."')");
		echo'T\'es désormait connecté ! Rends-toi sur le chat sur : /chat/';
	}
	else
	{
		echo'Mauvais identifiants';
	}
}

?>
<form method="post" action="connexion.php">
Pseudo : <input type="text" name="pseudo"/><br>
Mot-de-passe : <input type="password" name="mdp"/><br>
<input type="submit" name="Connexion !"/>
</form>
<?php
}
else
{
	echo "T'es déjà connecté ?";
}
?>