INC.LOGIN.PHP

<?php
  $gets = explode("?", $_SERVER['REQUEST_URI']);
  if(!empty($gets[1])) {
    $gets = "?" . $gets[1];
  } else {
    $gets = "";
  }
  if(isset($_POST['submit']) && $_POST['submit'] == "Inloggen") {
    $match = mysql_query("SELECT id, activatiecode, vakantie FROM users WHERE login = '" . $_POST['login'] . "' AND pass = '" . $_POST['pass'] . "'");
    if(mysql_num_rows($match) > 0) {
      $user = mysql_fetch_assoc($match);
      if($user['activatiecode'] == 0 && $user['vakantie'] <= 0) {
        mysql_query("UPDATE users SET online = '" . get_global_date("Y-m-d H:i:s") . "' WHERE id = '" . $user['id'] . "'");
        $_SESSION['id'] = $user['id'];
        echo'<script type="text/javascript">window.location.href = "index.php' . $gets . '";</script>';
      }
    } else {
      $match = mysql_query("SELECT id, activatiecode, vakantie FROM users WHERE login = '" . $_POST['login'] . "' AND pass_v2 = '" . md5($_POST['pass']) . "'");
      if(mysql_num_rows($match) > 0) {
          mysql_query("UPDATE users SET pass = '" . $_POST['pass'] . "', pass_v2 = '' WHERE login = '" . $_POST['login'] . "'");
          $user = mysql_fetch_assoc($match);
        if($user['activatiecode'] == 0 && $user['vakantie'] <= 0) {
          mysql_query("UPDATE users SET online = '" . get_global_date("Y-m-d H:i:s") . "' WHERE id = '" . $user['id'] . "'");
          $_SESSION['id'] = $user['id'];
          echo'<script type="text/javascript">window.location.href = "index.php' . $gets . '";</script>';
        }
      }
    }
    if(!isset($user['activatiecode'])) {
      $fout = "<div class=\"dark\"><font color=\"red\" style=\"font-weight: bold\">Je hebt een verkeerde gebruikersnaam of wachtwoord ingevuld!</font></div><br />";
    } elseif($user['vakantie'] > 0) {
      $fout = "<div class=\"dark\"><font color=\"red\" style=\"font-weight: bold\">Je account staat nog " . $user['vakantie'] . " dagen op vakantiestatus.</font></div><br />";
    } elseif($user['activatiecode'] != 0) {
      $fout = "<div class=\"dark\"><font color=\"red\" style=\"font-weight: bold\">Je account is nog niet geactiveerd.</font></div><br />";
    }
  }
?>


--------------


LOGIN.PHP


<?php
  echo'<div id="content_top"> </div>

        <div id="content">

<h1 class="titel">Inloggen</h1>
' . @$fout . '
Vul hieronder jouw accountgegevens in om toegang te verkrijgen tot je account:<br /><br />

<form method="post" action="index.php' . $gets . '">
<table cellspacing="4" cellpadding="0">

<tr>
<td>Gebruikersnaam:</td>
<td><input type="text" class="input" name="login"></td>
</tr>

<tr>
<td>Wachtwoord:</td>
<td><input type="password" class="input" name="pass"></td>
</tr>

<tr>
<td>&nbsp;</td>
<td><input type="submit" class="submit" name="submit" value="Inloggen"></td>
</tr>
</table>
</div>
<div id="content_bottom"> </div>';