modal_login

<?php
if (isset($_POST['login'])) {
$emailorusername = $_POST['emailorusername'];
$password = $_POST['password'];
$user_verify = mysql_query("SELECT * FROM users WHERE mail='$emailorusername' or username='$emailorusername' && password='".MD5($password)."' LIMIT 1");
$user_fetch = mysql_fetch_assoc($user_verify);
$ban_check = mysql_query("SELECT * FROM bans WHERE value='$user_fetch[username]'");
if (empty($emailorusername)) {
echo '<div id="toast_container_s" class="toast-top-center" aria-live="polite" role="alert"><div class="toast toast-error" style="display: table;"><div class="toast-message">Você não pode deixar o campo de login vazio.</div></div></div>';
}else{
if (empty($password)) {
echo '<div id="toast_container_s" class="toast-top-center" aria-live="polite" role="alert"><div class="toast toast-error" style="display: table;"><div class="toast-message">Você não pode deixar a sua senha vazia.</div></div></div>';
}else{
if (mysql_num_rows($user_verify) == 0) {
echo '<div id="toast_container_s" class="toast-top-center" aria-live="polite" role="alert"><div class="toast toast-error" style="display: table;"><div class="toast-message">Email ou senha estão incorretos.</div></div></div>';
}else{
if(mysql_num_rows($ban_check) == 1){
$ban = mysql_fetch_assoc($ban_check);
echo '<div id="toast-container" class="toast-top-center toast-sticky" aria-live="polite" role="alert"><div class="toast toast-error" style="display: block;"><div class="toast-progress"></div><div class="toast-title">Você foi banido.</div><div class="toast-message">Você foi banido permanentemente por: <b>'.$ban['reason'].'</b>.<button id="toast-close" class="toast-button">OK</button></div></div></div>';
}else{
$user_safety_a = mysql_query("SELECT * FROM heliocms_safetyquestions WHERE email='$user_fetch[mail]'");
$user_safety_q = mysql_fetch_assoc($user_safety_a);
$_SESSION['id'] = $user_fetch['id'];
if ($user_safety_q['trusted_ip'] <> $ip) {
mysql_query("UPDATE heliocms_safetyquestions SET active='1' WHERE email='$user_fetch[mail]'");
}
mysql_query("UPDATE users SET ip_last='$ip' WHERE mail='$user_fetch[mail]'");
mysql_query("INSERT INTO heliocms_sessions (last,user_id) VALUES ('".time()."','$user_fetch[id]')");
header ("Location: $og");
}}}}}
?>
<div class="modal fade" id="login">
<div class="modal-dialog" ng-class="size ? 'modal-' + size : ''">
    <div class="modal-content" uib-modal-transclude="">
        <div class="login">
            <button ng-click="$dismiss()" data-dismiss="modal" class="modal__close"></button>
            <h3 translate="LOGIN" class="modal__title">Login</h3>
            <div class="modal__content">
                <div on-login="$close()" class="login-form">
                    <form method="post" style="" ng-submit="login()" name="loginForm" novalidate="" shake="" class="login-form__form ng-pristine ng-valid-email ng-invalid ng-invalid-required">
                        <fieldset class="form__fieldset login-form__fieldset">
                            <div class="form__field">
                                <input value="<?php echo $emailorusername; ?>" style="" name="emailorusername" ng-model="email" ng-model-options="{ updateOn: 'default blur', debounce: { default: 500, blur: 0 } }" required="" email="" remote-data="'credentials'" autofocus="" placeholder="Usuário ou e-mail" class="form__input login-form__input ng-pristine ng-valid-email ng-invalid ng-invalid-required ng-touched" type="text">
                            </div>
                        </fieldset>
                        <fieldset class="form__fieldset login-form__fieldset">
                            <div class="form__field">
                                <input value="<?php echo $password; ?>" style="" name="password" ng-model="password" ng-model-options="{ updateOn: 'default blur', debounce: { default: 500, blur: 0 } }" required="" remote-data="'credentials'" placeholder="Senha" class="form__input login-form__input ng-pristine ng-untouched ng-invalid ng-invalid-required" type="password">
                        <button name="login" type="submit" ng-disabled="loginInProgress" class="login-form__button" translate="LOGIN_BUTTON">Vamos lá!</button>
                    </form>
                    <div class="login-form__register"><a href="/registration" translate="LOGIN_REGISTER">Ainda não tem uma conta? Entre já!</a></div>
                </div>
            </div>
        </div>
    </div>
</div>
</div>