<?php
if(!$do_login) exit;

require("configure.php");
require_once 'function_login_block.php';
die_if_login_block();

// declare post fields

$post_loginname = mysql_escape_string(trim($_POST['loginname']));
$post_password = md5(trim($_POST['password']));

$post_autologin = $_POST['autologin'];

$sql = "SELECT * FROM cms_login where cmsloginname = '$post_loginname' AND cmsloginpw = '$post_password' and cmsstatus = '1' ";
$result = mysql_query($sql);
	if (mysql_num_rows($result) > 0)
	{
		$row = mysql_fetch_array($result, MYSQL_ASSOC);
		$login_ok = true;
		
		$_SESSION['loginname'] = $row{'cmsloginname'};		
		$_SESSION['password'] = $row{'cmsloginpw'};
		$_SESSION['cmsloginid'] = $row{'cmsloginid'};
		$_SESSION['cmsrole'] = $row{'cmsrole'};
		
		if($post_autologin == 1)
		{
		$password_hash = md5($row{'cmsloginpw'}); // will result in a 32 characters hash
	
		setcookie ($cookie_name, 'usr='.$row{'cmsloginname'}.'&hash='.$password_hash, time() + $cookie_time);
		}

		insert_login_log($_SESSION['loginname'], true);
		header("Location: index.php");
		exit;
	}
	else
	{
	$login_error = true;
	insert_login_log($_POST['loginname'], false);
	die_if_login_block();
	}
?>