<?php
if(isset($_POST['submit_login']) && $user->data['user_id'] == ANONYMOUS)
{
    //form was submitted
    $username = $bvadb->real_escape_string($_POST['username']);
    $password = $bvadb->real_escape_string($_POST['password']);

    $q = "SELECT * FROM Users WHERE Username='{$username}' AND Pwd=MD5('{$password}') LIMIT 1";
    $result = $bvadb->Query($q);

    if(!$result->num_rows)
    {
        //Wrong usrname and pass
    }
    else
    {
        // log the user in

        $old_session_id = $user->session_id;
        $user->session_create($row['FID'], 0, false, $viewonline = true);

        //echo "<meta http-equiv=\"refresh\" content=\"0;url=/website/?page={$page}\">";
    }
}
else
{
    if($user->data['user_id'] == ANONYMOUS)
    {
        //display login form
    }
    else
    {
        //show login info
    }
}


?>