<?
include "header.p hp";
if(isset($_SESS ION['username ']) && isset($_SESSION ['password']) ) {
//REDIRECT TO USERS PROFILE...
header("L ocation: main.php"< img src=http://www. allsyntax.com/f orums/images/sm ilies/wink.gif border=0>;
} //end if logged in

//IF SUBMIT BUTTON PRESSED
if(isset($_POST ['submit'])) {

if(!$_POST['us ername']) die("Erro r: You must enter your username before logging in.";
if(!$_POST['pa ssword']) die("Erro r: You must enter your password before logging in.";


//set cookie if checked
if(!empty($_POS T['stay_in']) ) {
$joined =''.$_POST[' username'].'[ ]'.md5($_POST[ 'password']). '';
setcookie('log in_cookie', $joined, 2147483647, '/', '.main.php');
} //end if

//verify user...
$get_user = mysql_query(&q uot;SELECT * FROM `members` WHERE username = '".$_POS T['username'] ."' AND

user_password = '".md5($ _POST['passwor d'])."' ";
$q = mysql_fetch_obj ect($get_user);
if(!$q) die("< font size='2' face='verdana '><b>L ogin Failure: An error occured, please verify your username and password are correct."< img src=http://www. allsyntax.com/f orums/images/sm ilies/wink.gif border=0>;

//set session variables
$_SESSION['log ged_in'] = 1;
$_SESSION['use rname'] = $_POST['userna me'];
$_SESSION['pas sword'] = $_POST['passwo rd'];
session_write_c lose();

header("L ocation: main.php"< img src=http://www. allsyntax.com/f orums/images/sm ilies/wink.gif border=0>;

} else {
//show login form
?>
<form name="log in" method="p ost" action="& lt;? $_SERVER['PHP_ SELF']; ?>"> ;
<table width="10 0%" align="ce nter" cellpadding=&q uot;3" cellspacing=&q uot;3" border="1 " bgcolor=" <? echo$_CONFIG[' td1']; ?>" bordercolor=&q uot;<? echo$_CONFIG[' border']; ?>" style="bo rder-collapse: collapse" >
<tr>
<tr>
<td align="ce nter" colspan=" 2" bgcolor=" <? echo$_CONFIG[' td1']; ?>"> ;
<font size="2& quot; face="ver dana"> <b>Login to your Account
</td>
</tr>
<td width="25 %,*" align="ri ght" bgcolor=" <? echo$_CONFIG[' td3']; ?>"> ;
<font size="2& quot; face="ver dana"> <b>Userna me:
</td>
<td bgcolor=" <? echo$_CONFIG[' td2']; ?>"> ;
<input type="tex t" id="usern ame" name="use rname"> ;
</td>
</tr>
<tr>
<td align="ri ght" bgcolor=" <? echo$_CONFIG[' td3']; ?>"> ;
<font size="2& quot; face="ver dana"> <b>Passwo rd:
</td>
<td bgcolor=" <? echo$_CONFIG[' td2']; ?>"> ;
<input type="pas sword" id="passw ord" name="pas sword"> ;
</td>
</tr>
<tr>
<td align="ri ght" bgcolor=" <? echo$_CONFIG[' td3']; ?>"> ;
<font size="2& quot; face="ver dana"> <b>Submit :
</td>
<td bgcolor=" <? echo$_CONFIG[' td2']; ?>"> ;
<input type="sub mit" value="Su bmit" name="sub mit" id="submi t"> &nbsp; &nbsp; <font size="1& quot; face="ver dana"> Remember Me? <input type="che ckbox" name="sta y_in[]" checked=" yes">
</td>
</tr>
</table>
</form>
<?
}//end else
include "footer.p hp";
?>

<?
ob_start();
session_start() ;
require_once(' connect.php');
require_once(' config.php');

//check cookie
if ($_SESSION['lo gged_in'] != 1 && isset($_COOKIE[ 'login_cookie '])) {
list($user, $pass) = explode('[]', $_COOKIE['logi n_cookie']);
$qu = mysql_query(&q uot;SELECT `user_password` FROM `members` WHERE `username` = '".addsl ashes($user).& quot;'";
if (mysql_num_rows ($qu) == 1) {
$passw = mysql_fetch_obj ect($qu);
if ($passw->use r_password == $pass) {
$_SESSION['log ged_in'] = 1;
$_SESSION['use rname'] = $user;
$_SESSION['pas sword'] = $pass;
}
}
}

if(!isset($_SES SION['username ']) && !isset($_SESSIO N['password'] )) {
$_SESSION['log ged_in'] = 0;
$user = "Guest&q uot;;
$message = "<font size='1' face='verdana '>Welcome <b>$user& lt;/b>. <a href=\"r egister.php\& quot;>[Regis ter]</a> &nbsp; <a href=\"l ogin.php\&quo t;>[Login]&l t;/a>" ;
}else if ($_SESSION['lo gged_in'] == 1 ) {
$user = $_SESSION['use rname'];
$message = "<font size='1' face='verdana '>Welcome <b>$user& lt;/b>, you are now logged in. <a href=\"l ogout.php\&qu ot;>[Logout] </a>&quo t;;
}
?