<?
	if (isset($_POST['submit'])) {

		  $_POST = db_escape($_POST);

		  $passwd = safepass($_POST['passwd']);
		  $username = mysql_real_escape_string($_POST['user']);

		  $sql = "SELECT id FROM members WHERE user='$username' AND pass='$passwd'";

		  if ($username != ANVÄNDARNAMNET || $password != LÖSENORDET) {
			  $bncqry1 = mysql_query("SELECT NOW() + INTERVAL 15 MINUTE as expire");
			  $bncrow1 = mysql_fetch_assoc($bncqry1);
			  $expire = $bncrow1['expire'];

			  $date = date("Y-m-d H:i:s");
			  $sql2 = mysql_query("SELECT * FROM `log` WHERE `ip`='". $_SERVER['REMOTE_ADDR'] ."'");
			  $joel = mysql_fetch_assoc($sql2);
			  if ($date > $joel['expire']) {
				  if ($joel['retry'] > 3) {
					exit("Ditt IP är bannat i 15minuter");

				  }
				  if ($joel['retry'] < 3) {
					$retry = $joel['retry'] + 1;
					mysql_query("INSERT INTO log (datetime,expire,ip,retry) VALUES (NOW(),'$hostname','". $_SERVER['REMOTE_ADDR'] ."','$retry')");
				  }
			  }
			  elseif ($date < $joel['expire']) {
				$retry = 0;
					mysql_query("INSERT INTO log (datetime,expire,ip,retry) VALUES (NOW(),'$hostname','". $_SERVER['REMOTE_ADDR'] ."','$retry')");
			  }
		  }
		  else {
			mysql_query("INSERT INTO log (datetime,expire,ip,retry) VALUES (0000-00-00,'$hostname','". $_SERVER['REMOTE_ADDR'] ."','0')");
			$retry = 0;
			header("location:?p=inloggad");
		  }
?>