<?php ob_start();
session_start();
include("core/head.php");

?>



    <div class="container">
	<h1>
        <a href="/"><i class="icon-arrow-left-3 fg-darker smaller"></i></a> Login<small class="on-right"></small>
    </h1>

	<div class="span7 offset3">
	<?php
	$form = "
	<form action=\"login.php\" method=\"post\">
		<p>Name</p>
		<div class=\"input-control text\">
			<input type=\"text\" value=\"\" placeholder=\"officer id\" name=\"name\"/>
			<button class=\"btn-clear\"></button>
		</div>

		</p>Password</p>
		<div class=\"input-control password\">
			<input type=\"password\" value=\"\" placeholder=\"officer password\" name=\"password\"/>
			<button class=\"btn-reveal\"></button>
		</div>

		<input type=\"submit\" name=\"loginbutton\" value=\"Authorize\">
	</form>";


	if (isset($_SESSION['name'])){
				echo "Hi $name , you're already logged in! You might also be seeing this page if you don't have the sufficient permission to access a page!";
				}
				else{

					if(isSet($_POST['loginbutton'])){
						$user = $_POST['name'];
						$password = $_POST['password'];

						if($user){
							if($password){
								include 'functions/connect.php';
								$password = md5($password);

								$query = mysqli_query($con,"SELECT * FROM users WHERE name='$user'");
								$numrows = mysqli_num_rows($query);

								if ($numrows == 1){

									$row = mysqli_fetch_assoc($query);
									$dbpass = $row['password'];
									$dbuser = $row['name'];
									$dbrank = $row['rank'];
									$dbrankid = $row['rankid'];
									$dbclan = $row['code'];

									if ($password == $dbpass){

										$_SESSION['name'] = $dbuser;
										$_SESSION['rank'] = $dbrank;
										$_SESSION['rankid'] = $dbrankid;
										$_SESSION['code'] = $dbclan;

										echo "You have been logged in as <b>$dbuser</b>. Your rank is <b>$dbrank</b>. Click <a href='dashboard.php'>HERE</a> to go to the panel.";

									}
									else
										echo "Incorrect password. $form";

								}
								else
									echo "Name not found. $form";


							}
							else
								echo "You must enter your password. $form";

						}
						else
							echo "Please enter your name. $form";

					}
					else
						echo $form;
				}
					?>


	</div>

    </div> <!-- End of container -->

<?php include("core/foot.php"); ?>