<div>
<?php
include("config.php");
if($_POST['username'] AND $_POST['password'])
{
$username = $_POST['username'];
$password = $_POST['password'];
}
else if (isset($_COOKIE['login']))
{
$var = explode("|", $_COOKIE['login']);
$username = $var[0];
$password = $var[1];
}
else
{
$username = null;
$password = null;
}
if(preg_match('/^([a-z0-9_-]{4,16})/i',$username) AND preg_match('/^([a-z0-9_-]{4,16})/i',$password) )
{
$sql = mysql_query("SELECT * FROM users WHERE username='$username' AND password='$password' LIMIT 0,1");
if($row = mysql_fetch_array($sql))
{
$_SESSION['username'] = $row['username'];
$_SESSION['password'] = $row['password'];
$_SESSION['icq'] = $row['icq'];
$_SESSION['skype'] = $row['skype'];
$_SESSION['userid'] = $row['id'];
if($_POST['check'])
{
setcookie("login",$username."|".$password,time()+24*60*60*200);
}
}
else
{
if($_POST)
{
$error = "Грешno потребителско име";
}
else
{
setcookie('login', '', time() - 24*60*60*200);
}
}
}
if($_SESSION)
{
echo '<a href="profile.php?my_profile=on">Моят профил</a><a href="?logout=true">Log out ['.$_SESSION['username'].'</a>';
}
else
{
echo '<form action="" method="POST">
<input type="text" name="username"><br />
<input type="password" name="password"><br/>
<input type="checkbox" name="check">
<input type="submit" value="Влез">
</form>';
}
if ( $_GET['logout'] == "true" AND ( (int) $_SESSION['userid']) > 0)
{
session_unregister("username");
session_unregister("password");
session_unregister("icq");
session_unregister("skype");
session_unregister("userid");
session_destroy();
if ( isset($_COOKIE['login']) )
{
setcookie('login','',time()-24*60*60*200);
}
header("Location: ".$_SERVER['PHP_SELF']);
}
echo '<div><a href="users.php">Потребители</a></div>';
?>
</div>