<?php
if (!isset($_SESSION))
    {
        session_start();
    }
?>
<?php require_once('../Connections/uploader.php'); ?>
<?
function loginFormErrorsCheck ($loginUsername, $loginPassword) {
  if (empty($loginUsername) || empty($loginPassword)) {
    return true;
  } else {
    return false;
  }
}
?>
<?php
if (isset($_POST['login'])) {

    $loginUsername = $_POST['uname'];
    $loginPassword = $_POST['pword'];

    $errors = loginFormErrorsCheck ($loginUsername, $loginPassword);

    if (!$errors) {

        mysql_select_db($database_uploader, $uploader);
        $query = "SELECT * FROM members WHERE uname='"
        . mysql_real_escape_string($loginUsername) . "' AND pword='"
        . mysql_real_escape_string($loginPassword) . "'";
        $result = mysql_query($query) or die(mysql_error());

        // make sure the username and password were found
        if (mysql_num_rows($result) > 0) {
            $row = mysql_fetch_array($result) or die(mysql_error());

            if ($loginUsername == "admin") { // Admin Login
                mysql_close($result);
                $_SESSION['admin'] = "Admin.";
                header('Location: admin.php');
                exit;
            }

            if ($row['acntStatus'] == 0) {  // If account is OK
                mysql_close($result);
            }
            else // If account is in bad standing
                {
                    $errors[0]="Your account has been temporarily/permanently disabled, or terminated. Please contact us for more details.";
                }

            if ($row['activated'] == 1) {

            }
            else {$errors[1] = "Your account is not yet activated.";}

            if ($row['activated'] == 1 && $row['acntStatus'] == 0)
            {
                mysql_close($result);
                $_SESSION[$user] = $loginUsername;
                header('Location: users/' . $row['uname'] . '/index.php');
                exit;
            }
        }
    }
}
?>

<?php
if (isset($errors) && !empty($errors)) {
    for ($i=0; $i<2; $i++) {
        echo "<p class='errors'>$errors[$i]<br></p>";
    }
}
?>
<style>
.errors {
    color:#F00;
    font-weight:bold;
}
</style>
<form action="" method="post" id="login" name="login" >
<table border="1" align="center">
  <tr>
    <td colspan="2"><h3>Login</h3>
      <p>Please enter a username to continue being uploading your files:</p></td>
    </tr>
  <tr>
    <td>Username: </td>
    <td><input type="text" name="uname" id="uname" value="<? if (isset($errors)) {echo $_POST['uname'];} ?>" /></td>
  </tr>
  <tr>
    <td>Password: </td>
    <td><input name='pword' type='password' value="<? if (isset($errors)) {echo $_POST['pword'];} ?>" /></td>
  </tr>
  <tr>
    <td colspan="2">By clicking &quot;Submit&quot;, you have read agreed to the <a href="#">Terms and Conditions</a>. </td>
  </tr>
    <tr>
      <td>&nbsp;</td>
      <td><input type="submit" name="login" id="login" value="Submit" /></td>
    </tr>
</table>
</form>