#
# File name: login.php
# Author: Kingsley
# Date: 06/06/2008
# Time: 5:36 AM
#
if(!defined("IN_BGS")){
include("../404.php");
}
switch($_GET["function"]){
default;
?>
break;
case "logging_in";
if(empty($_POST)){
print "You must enter information to login with!";
} else {
$username = trim(addslashes($_REQUEST["username"]));
$password = md5($_REQUEST["password"]);
$login = mysql_query("SELECT username, password, level, committee, verified from `users` where username='$username' AND password='$password'");
$checklogin = mysql_num_rows($login);
if($checklogin == 0){
print "Incorrect username or password, please retry";
} elseif($checklogin == 1){
$logindata = mysql_fetch_array($login);
if($logindata["verified"] == 0){
$varuser = base64_encode($logindata["username"]);
print "Your account is not verified please verify your account. If you would like another e-mail please click here";
}
if($logindata["level"] < 0){
print "Your account is banned. Please login with another nick.
If you wish to dispute this, please e-mail bans@beyondgaming.org";
}
if($logindata["verified"] != 0 && $logindata["level"] >= 0) {
session_start();
$ip = Getip();
$_SESSION["user"]["name"] = $logindata["username"];
$_SESSION["user"]["password"] = $logindata["password"];
$_SESSION["user"]["level"] = $logindata["level"];
$_SESSION["committee"]["name"] = $logindata["committee"];
$getinfo = mysql_query("SELECT * from committees where commname ='".$_SESSION["committee"]["name"]."'");
$comminfo = mysql_fetch_array($getinfo);
$_SESSION["committee"]["token"] = $comminfo["token"];
$_SESSION["committee"]["tag"] = $comminfo["tag"];
$time = time()+54000;
mysql_query("UPDATE `users` set lastlogin='$time' where username='".$_SESSION["user"]["name"]."'");
mysql_query("UPDATE `users` set ipaddr='$ip' where username='".$_SESSION["user"]["name"]."'");
mysql_query("UPDATE `users` set dnsaddr='".gethostbyaddr(GetIP())."' where username='".$_SESSION["user"]["name"]."'");
if($_POST["rememberme"] == "yes"){
$cookie = base64_encode($_SESSION["user"]["name"]."|".$_SESSION["user"]["password"]);
?>
}
print "";
}
}
}
break;
}
?>