<?php
require_once "main.php";

class login {

	function connect($username, $password) {
		$username = clean($username);
		$password = clean($password);
		if(!empty($_POST['username']) && !empty($_POST['password'])) {
			$loginquery = mysql::query("SELECT `password`, `salt` FROM `users` WHERE username='$username'");
			$logindata = mysql::data($loginquery);
			$logincount = mysql::rows($loginquery);
			$generatedpw = hash("sha512", $username.$logindata['salt']);
			if($logincount == 1 && $generatedpw == $logindata['password']) {
				$identify = hash("sha512", $username.time());
				$_SESSION['identify'] = $identify;
				mysql::query("UPDATE `users` SET identify='$identify' WHERE username='$username'");
				echo "Teisingai";
			} elseif($logincount == 1 && $generatedpw != $logindata['password']) {
				echo "Klaida: neteisingas vartotojo vardas arba slapta&#382;odis";
			}
			if($logincount != 1) {
				echo "Klaida: toks vartotojas neegzistuoja";
			}
		}
		if(!empty($_POST['username']) && empty($_POST['password'])) {
				echo "Klaida: pra&#353;ome &#303;vesti slapta&#382;od&#303;";
		}
		if(empty($_POST['username']) && !empty($_POST['password'])) {
				echo "Klaida: pra&#353;ome &#303;vesti vartotojo vard&#261;";
		}
		if(empty($_POST['username']) && empty($_POST['password'])) {
				echo "Klaida: pra&#353;ome &#303;vesti vartotojo vard&#261; ir slapta&#382;od&#303;";
		}
	}

	function form() {
		echo'
		<form method="POST" action="'.$_SERVER['PHP_SELF'].'">
		<input type="text" name="username" />
		<input type="password" name="password" />
		<input name="login" type="submit" value="Login" />
		</form>
		';
	}
}

if(isset($_POST['login'])) {
	$username = clean($_POST['username']);
	$password = clean($_POST['password']);

}

login::form();

?>