<?php error_reporting(0);
if (!defined('AXE'))
	exit;
//if session set, then we shoudlnt be here
if (isset($_SESSION['user']))
{
	print "Du bist schon eingeloggt!."; $tpl_footer = new Template("styles/".$style."/footer.php");
	$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');
	print $tpl_footer->toString();
	exit;
}
//common include
$box_simple_wide = new Template("styles/".$style."/box_simple_wide.php");
$box_wide = new Template("styles/".$style."/box_wide.php");
$box_wide->setVar("imagepath", 'styles/'.$style.'/images/');
$box_simple_wide->setVar("imagepath", 'styles/'.$style.'/images/');
//end common include
if (isset($_POST['action']))
{
	if (pun_htmlspecialchars($_POST['username'])=='')
		{
			$cont2= "Login/username cannot be blank. <meta http-equiv='refresh' content='2;url=./quest.php?name=login'/>";
		}
		elseif (pun_htmlspecialchars($_POST['username'])=='')
		{
			$cont2= "Password cannot be blank! <meta http-equiv='refresh' content='2;url=./quest.php?name=login'/>";
		}
	//lets select acc db
	mysql_select_db($acc_db);
	special_core_exec_onlogin(pun_htmlspecialchars($_POST['username']));

	$a  = mysql_query("SELECT ".$db_translation['encrypted_password']." FROM ".$db_translation['accounts']." WHERE ".$db_translation['login']." = '".$db->escape(pun_htmlspecialchars($_POST['username']))."'") or die (mysql_error());
	$a2 = mysql_fetch_array($a);
	if ($a2[0]==sha1(strtoupper(pun_htmlspecialchars($_POST['username'])).':'.strtoupper(pun_htmlspecialchars($_POST['password']))))
	{
		if (pun_htmlspecialchars($_POST['username'])=='')
		{
			$cont2= "Login/username cannot be blank. <meta http-equiv='refresh' content='0;url=./quest.php?name=login'/>";
		}
		elseif (pun_htmlspecialchars($_POST['password'])=='')
		{
			$cont2= "Password cannot be blank! <meta http-equiv='refresh' content='0;url=./quest.php?name=login'/>";
		}
		else
		{
			$_SESSION['user']=pun_htmlspecialchars($_POST['username']);
			$cont2= "You are now logged in! <meta http-equiv='refresh' content='0;url=./'/>";
		}
		$box_wide->setVar("content_title", "Login");
$box_wide->setVar("content", $cont2);
print $box_wide->toString();
		$tpl_footer = new Template("styles/".$style."/footer.php");
	$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');
	print $tpl_footer->toString();
	exit;
	}
	else
	{
		$warn = "<font color='red'>(!)</font>";
		$warn2 = "<strong>Incorrect username or password!</strong>";
	}
}


$cont2='
							<form action="" method="post">
								<table align="center" border="0">

									<tr>
										<td class="td">
											<label for="username">
												Username:                                 	       </label>										</td>
										<td>
											<input type="text" id="username" maxlength="20" name="username" /> '. $warn.'									</td>
									</tr>

									<tr>
										<td class="td">
											<label for="password">
												Password:                                 	       </label>										</td>
										<td>
											<input type="password" id="password" maxlength="20" name="password" /> '. $warn .'									</td>
									</tr>
								</table><center>'. $warn2.'<br />
							  *Use your in-game account details*<br /><br />
								<a href="./quest.php?name=gimmepass">Forgot password?</a><br /><br />
								<input type="submit" name="action" value="Login" class="button doit" />
							</form></center>';
$box_wide->setVar("content_title", "Login");
$box_wide->setVar("content", $cont2);
print $box_wide->toString();