$usern = addslashes($_POST['username']);
$pw = md5($_POST['password']);
$ip=getenv(REMOTE_ADDR);
$result = mysql_query("SELECT * from `users` where username = '$usern' AND password = '$pw'");
$num = mysql_num_rows($result);
if ($num == 0){
Error("Incorrect information", "Incorrect login information",true);
} else {
$info = mysql_fetch_array($result);
$sess->start();
$sess->register($info["username"]);
$_SESSION["user"]["name"] = $info["username"];
$_SESSION["user"]["level"] = $info["level"];
$_SESSION["user"]["password"] = $info["password"];
$_SESSION["user"]["alerted"] = 0;
$_SESSION["user"]["alerted2"] = 0;
$query2 = "UPDATE users set last_login='$time' where username='".$_SESSION["user"]["name"]."'";
$query3 = "UPDATE users set ip='$ip' where username='".$_SESSION["user"]["name"]."'";
mysql_query($query2);
mysql_query($query3);
if ($_SESSION["user"]["level"] == -2){
unset($_SESSION["user"]);
Error("Oops!", "It appears your account is not verified yet");
}
if ($_SESSION["user"]["level"] == -1){
unset($_SESSION["user"]);
Error("Oops!", "Your account is banned");
}
Info("Redirecting...","Now redirecting you to the index.\n
");
}
?>