<?php
require_once 'config.php';
require_once 'functions.php';

$username = isset($_POST['username']) ? $_POST['username'] : '' ;
$password = isset($_POST['password']) ? $_POST['password'] : '' ;
$message = '';

if (isset($_SESSION['logout'])) {
	$message = '<div class="alert-box notice"><span>NOTICE: </span>You have been logged out.</div>';
	unset($_SESSION['logout']);
}

if (isset($_SESSION['register'])) {
	$message = '<div class="alert-box success"><span>SUCCESS: </span>You have been registered Successfully.</div>';
	unset($_SESSION['register']);
}


if ( !empty($username) && !empty($password) ) {

		$sqlUsername = cleanSql($username);

		$query = mysql_query("SELECT `id`,`password`,`admin` FROM users WHERE username='{$sqlUsername}' LIMIT 1") or die(mysql_error());
		$userRow = mysql_fetch_array($query);

		if($userRow['password'] == sha1($password) && mysql_num_rows($query) == 1)
		{
			$_SESSION['username'] = $username;
			$_SESSION['userid']   = $userRow['id'];
			$_SESSION['admin']    = $userRow['admin'];
			redirect('home.php');
		}
		else
		{
			$message = '<div class="alert-box error"><span>Error: </span>The username or password was incorrect.</div>';
		}
}

include '_header.php';
echo '
<article id="content" style="margin-top: 70px;">

<h2>Login</h2>
		<p>'.$message.'</p>
<form id="ContactForm" action="" method="post">
						<div>
							<div class="wrapper">
								<span>Username:</span>
								<div class="bg"><input type="text" name="username" id="username" class="input"></div>
							</div>
							<div class="wrapper">
								<span>password:</span>
								<div class="bg"><input type="password" name="password" id="password" class="input"></div>
							</div><br>
							<div class="buttons">
							<input type="submit" value="Login" class="button1" />
							</div>
						</div>
					</form>
</article>
</div>
<div>

';
include '_footer.php';
?>