<?php
session_start();

require_once('arquivos/includes/connect.php');
require_once('arquivos/functions/functions.php');
include ('arquivos/functions/diretorios.php');
$erro = "";
if (isset($_POST['logout'])):
	session_destroy();
	unset($_SESSION['usr_id']);
        unset($_SESSION['usr_level']);
	header("Location: ../../index");
endif;
if (isset($_POST['submit'])):

    $login = strip_tags($_POST['login']);
    $password = strip_tags($_POST['senha']);

    if(campoBranco($login) == true || campoBranco($password)):
        echo  "<script type='text/javascript'>
alertify.set('notifier','position', 'top-left');
alertify.error('Preencha todos os campos.');
</script>";
    else:
        $stmt = $mysqli->prepare("SELECT id,senha,suspensa,level,banido FROM usr_users WHERE username = ? ");
        $stmt->bind_param('s', $login);
        $stmt->execute();
        $stmt->store_result();
        $stmt->bind_result($id,$senha,$suspensa,$level,$banido);
        $stmt->fetch();

	$count = $stmt->num_rows; // if email/password are correct returns must be 1 row
	$ip = $_SERVER['REMOTE_ADDR'];


        if(checkLogins($id, $mysqli) == true || $suspensa == 1 ):
          echo  "<script type='text/javascript'>
alertify.set('notifier','position', 'top-left');
alertify.error('Conta bloqueada por segurança, muitas tentativas. Contate um staff do site.');
</script>";
          $mysqli-> query("UPDATE usr_users SET suspensa = '1' WHERE id = '$id';");

        elseif($banido == true):
            $query = "SELECT * FROM usr_bans WHERE usr_id = '$id'";
            $exec = $mysqli->query($query);
            while($rowBan = $exec->fetch_assoc()):
                $data = date('d/m/Y', $rowBan['tempo']);
                echo "<script type='text/javascript'>
alertify.set('notifier','position', 'top-left');
alertify.alert('Você foi banido(a)'', 'Motivo do banimento: {$rowBan['motivo']} - Termina em {$data}');
</script>
";
            endwhile;
	elseif (password_verify($password, $senha) && $count==1) :
		$_SESSION['usr_id'] = $id;
                $_SESSION['usr_level'] = $level;
                echo "<script type='text/javascript'>
alertify.set('notifier','position', 'top-left');
alertify.success('Logado com sucesso.');
</script>
";

echo "<script language= 'JavaScript'>
location.href='../beta.php'
</script>";
        else:
            $now = time();
        $ip = $_SERVER['REMOTE_ADDR'];
        $query = "INSERT INTO usr_logins_falhas(id_usr , tempo,ip)VALUES ('$id', '$now', '$ip')";
        $exec = $mysqli->query($query);
		 echo  "<script type='text/javascript'>
alertify.set('notifier','position', 'top-left');
alertify.error('Login ou senha incorretos.');
</script>";

        endif;
    endif;
endif;
?>