<?php session_start(); if(isset($_REQUEST['login_button'])||$_REQUEST['auto']==1){ require '../_database/database.php'; $errmsg_arr = array(); $errflag = false; $username= mysqli_real_escape_string($database,$_REQUEST['username']); $password= mysqli_real_escape_string($database,$_REQUEST['password']); if($username == '') { $errmsg_arr[] = 'Usuario no encontrado'; $errflag = true; } if($password == '') { $errmsg_arr[] = 'Contraseña no encontrado'; $errflag = true; } if($errflag) { $_SESSION['ERRMSG_ARR'] = $errmsg_arr; session_write_close(); header("location: authentication-check.php"); exit(); } $sql="SELECT user_username,user_active,user_password FROM user WHERE user_username='$username'AND user_password='$password'"; $result= mysqli_query($database,$sql) or die(mysqli_errno()); $trws= mysqli_num_rows($result); if($trws==1){
$rws= mysqli_fetch_array($result);
    If($rws["user_active"] == 1){
     $_SESSION['user_username']=$rws['user_username']; $_SESSION['user_password']=$rws['user_password']; $_SESSION['user_ip']=$rws['user_ip']; $user_ip=$_SERVER['REMOTE_ADDR']; $sql3="UPDATE user SET user_ip='$user_ip'WHERE user_username = '$temp'"; mysqli_query($database,$sql3)or die(mysqli_error($database)); header("location:../perfil.php?user_username=$username&request=login&status=success");
    }else{
    $errmsg_arr[] = 'este usuario a sido banneado';
    }
 } else { $errmsg_arr[] = 'Usuario y contraseña no fueron encontrados'; $errflag = true; if($errflag) { $_SESSION['ERRMSG_ARR'] = $errmsg_arr; session_write_close(); header("location: ../components/authentication-check.php"); exit(); } } } ?>