<?
include_once("app.header.php");

if(check_login($db_conn) === true)
{
	load_lv();
}
else
{
	$tpl_file = "templates/".$_SESSION['cont_lang']."/login.htm";
	$tpl = new bTemplate();
	
	if($_POST['sendlogform'] == 1)
	{
		$logname = trim($_POST['logname']);
		$logpass = trim($_POST['logpass']);
		$msg = "&nbsp;";
		if($logname == '' || $logpass == '')
		{
			$msg = $lang['msg']['error'][1];
		}
		else
		{
			$sql = sprintf("select id, logstatus from ".TBL_LOGDATA." where logname = '%s' and logpass = '%s'",
            	db_esc_string($logname, $db_conn),
            	db_esc_string(md5($logpass), $db_conn));
			$getdata = db_query($sql,$db_conn);
			$numdata = db_num_rows($getdata);
			if($numdata != 1)
			{
				$msg = $lang['msg']['error'][2];
			}
			else
			{
				$data = db_fetch_array($getdata);
				if($data[logstatus] == 0)
				{
					$msg = $lang['msg']['error'][3];
				}
				else
				{
					$_SESSION['logon_id'] = $data[id];
					$_SESSION['logon_time'] = time();
					$_SESSION['logon_status'] = "User_Logged_In";
					$updfields = "thislogin = '".$_SESSION['logon_time']."'";
					$updsql = "update ".TBL_LOGDATA." set ".$updfields." where id = '".$_SESSION['logon_id']."'";
					db_query($updsql,$db_conn);
					return_2_login(1);
				}
			}
		}
	}
	else
	{
		$logname = "";
		$msg = "&nbsp;";
	}
	
	$tpl->set("logname",$logname);
	$tpl->set("msg",$msg);
	echo $tpl->fetch($tpl_file);
}
?>