<?php
session_start();
if(isset($_POST['luser']) || isset($_POST['lpass'])) {
require("main.php");
$luser = $_POST['luser'];
$lpass = $_POST['lpass'];
Connect();
$luser = stripslashes($luser);
$lpass = stripslashes($lpass);
$luser = mysql_real_escape_string($luser);
$lpass = mysql_real_escape_string($lpass);
$query = mysql_query("SELECT * FROM users WHERE username='$luser' AND password='$lpass'") or die("Error in query: " . mysql_error() );
if(mysql_num_rows($query) == 1) {
Get_alvl();
Get_rank();
Get_squad();
$_SESSION['loggedin'] = "true";
$_SESSION['username'] = $luser;
Redir_alvl();
} else {
echo "ERROR: Incorrect username or password!";
}
} else {
echo "You forgot to fucking fill me in. Go back and fill me in properly!";
}
?>