<?php
        require_once('includes/core/conn.php');
	if(isset($_POST['namn']) && isset($_POST['pass'])){
		$md5_pass = md5($_POST['pass']);
		$username = mysql_real_escape_string($_POST['namn']);
		$query = mysql_query("select * from medlem where namn = '".$username."' and pass = '".$md5_pass."'");
		if(mysql_num_rows($query) == 1) {
			$row = mysql_fetch_assoc($query);

			$_SESSION['user_id'] = $row['user_id'];
			$_SESSION['namn'] = $row['namn'];
			$_SESSION['level'] = $row['level'];
			$online = mysql_query("UPDATE medlem SET online = '1' WHERE user_id = '".$row['user_id']."'");
			if(!$online){
				die("Kunde inte ge dig statusen online :( Varför?; ".mysql_error());
			}
			header("location:javascript:history.go(-1);");
			exit();
		}
		else{
			echo "Fel lösenord eller användarnamn.";
		}
	}


?>