<?
session_start();
error_reporting (E_ALL ^ E_NOTICE);
echo $_SESSION['username'];
echo "<br>Login";
echo $_SESSION['login'];

$_SESSION['login'] = $_POST['login'];

if ($_SESSION['login'] == 0)
	session_destroy();

if($_POST['login'] == 1 || $_SESSION['login'] == 1) {
			$_SESSION['login'] = '1';

			 /* Her gjoer du sjekk mot DB. */
			 if($_POST['username'] = "morten.lein@edb.com" && $_POST['login'] = '1' || $_SESSION["username"] = "morten.lein@edb.com" ) {
				$_SESSION['username'] = $_POST['username'];
				$_SESSION['password'] = $_POST['password'];

			 }

				   include('../connect.php');

					 if (!$_POST["username"] || !$_POST["password"] || !$_SESSION["username"] || !$_SESSION["passord"])
					{
					die("Du m&aring; fyll ut et brukernavn og passord!");
					}
					else {
					 $q = "SELECT * FROM `users` "
					."WHERE `username`='".$_POST["username"]."' "
					."AND `password`= 'blabla' "
					."LIMIT 1";
			  // Run query

					$r = mysql_query($q);

					   if(mysql_num_rows($r) < 1)
						   {
							 die("Brukernavn eller passord ikke funnet i databasen");
						   }

			}


			if($_GET['login'] == 0) {
				unset($_SESSION['username']);
				  session_destroy;
			}

}

 if(!isset($_SESSION['username'])) {

  echo "Vennligst logg inn p&aring; siden<br>";

  echo "<form action=\"index.php?module=admin\" method=\"POST\">";
  echo "<input name=\"login\" value=\"1\" type=\"hidden\">";
  echo "Username: <input name=\"username\" size=\"15\" value=\"morten.lein@edb.com\"><br />";
  echo "Password: <input type=\"password\" name=\"password\" size=\"8\"><br />";
  echo "<input type=\"submit\" value=\"Login\">";
  echo "</form>";

 } else {
 if ($action == 'add')
	echo "add shit";

 print "<a href=\"index.php?module=admin&login=0\">logg ut</a><br />";

 print "<a href=\"index.php?module=admin&login=0\">logg ut</a><br />";
 }



?>