<?php
if($_POST) {
session_start();

	require_once('config.php');
	require_once('functions.php');

	$link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD);
	if(!$link)
		die('Failed to connect to server: ' . mysql_error());

	$db = mysql_select_db(DB_DATABASE);
	if(!$db)
		die("Unable to select database");

	$login = clean($_POST['user']);
	$password = clean($_POST['pass']);


	$qry="SELECT * FROM users WHERE username='".$login."' AND userpw='".md5($password)."'";
	$result=mysql_query($qry);


	if($result){
		if(mysql_num_rows($result) == 1) {

			session_regenerate_id();
			$member = mysql_fetch_assoc($result);
			$_SESSION['SESS_MEMBER_ID'] = $member['userid'];
			$_SESSION['SESS_FIRST_NAME'] = $member['username'];
			session_write_close();
			echo 'true';
		}
	}
} // avslutar if($_POST) {
	else {
		header("Location: haxx.php");
	} //avslutar else if($_POST) {
?>