<?php
if(isset($_SESSION['name'])){
    if (isset($_POST['textgebied'])) {
        $contentHandler->setContent($_POST['titel'],$_POST['ta'],$_GET['edit']);
    }
    if(isset($_GET['option'])){
        $option = $_GET['option'];
        switch ($option){
            case "addact":
                include("../inc/page_addact.php");
                return;
                break;
            case "editact":
                include("../inc/page_editact.php");
                return;
                break;
            case "edit":
                include("../inc/page_edit.php");
                return;
                break;
            case "delete":
                include("../inc/page_deleteact.php");
                return;
                break;
            case "addlang":
                include("../inc/page_addlang.php");
                return;
                break;
            case "editlang":
                include("../inc/page_editlang.php");
                return;
                break;
            case "doeditlang":
                include("../inc/page_doeditlang.php");
                return;
                break;
            case "adduser":
                include("../inc/page_adduser.php");
                return;
                break;
            case "addpag":
                include("../inc/page_addpag.php");
                return;
                break;
            case "editpag":
                include("../inc/page_editpag.php");
                return;
                break;
            case "deletepag":
                include("../inc/deletepag.php");
                return;
                break;
        }
    }
    include("../inc/page_beheerindex.php");

}else{
    $succes = false;
    if (isset($_POST['sub-form'])) {
        //als op de submit knop gedrukt is
        if (!empty($_POST['name']) && !empty($_POST['pass'])) {
            //als alles ingevuld is

            //haal bijbehorende pass uit database
            $query = "SELECT user, pass FROM g3bruik3rs ";
            $query .= "WHERE user='".$_POST['name']."' AND pass='".$_POST['pass']."';";
            $result = mysql_query($query) or die ($errorHandler->render(mysql_error()));
            $row = mysql_fetch_array($result);
            if(mysql_num_rows($result) != 0) {
                $name = $_POST['name'];
                $_SESSION['name'] = $name;
                //setcookie('session_id',session_id());
                $succes = true;
            }
            else{
                $loginerror = $loginerror1[$_GET['lang']];
            }
        }
        else{
            $loginerror = $loginerror2[$_GET['lang']];
        }
    }
    if(!$succes){
        ?>
<div id="content3">
    <?php
    echo '<span class="titel">Inloggen</span>';
    echo '<br/><br/>';
    echo '<form name="loginform" method="post" action="../html/MedischeKaart.php?page=inloggen&lang='.$_GET['lang'].'">' ;
    if(isset($loginerror)){
        echo '<div class="form-block">';
        echo '<font color="red">'.$loginerror.'</font><br/><br/>';
        echo '</div>';
    }
    ?>
    <div class="form-block">
        <label for="name">Naam:</label>
        <input type="text" name="name" id="name" size="40"
               <?php if (!empty($_POST['name'])){
                   echo 'value="'.$_POST['name'].'"';
               }?>/>
    </div>
    <div class="form-block">
        <label for="pass">Wachtwoord:</label>
        <input type="password" name="pass" id="pass" size="40"
               <?php if (!empty($_POST['pass'])){
                   echo 'value="'.$_POST['pass'].'"';
               }?>/>
    </div>
    <div class="form-block">
        <input type="submit" value="Inloggen" name="sub-form" />
    </div>
    </form>
</div>

<?php
}else{
header("Location: ../html/MedischeKaart.php?page=beheer&lang=".$_GET['lang']."");
}
}
?>