include("includes/functions.php");
$db=mysql_connect("localhost", "web12702", "ddCkXfM22"); mysql_select_db("web12702_shop", $db);
//Checks if there is a login cookie
if( !count($_POST) && isset($_COOKIE['ID_my_site']) ) {
//if there is, it logs you in and directes you to the members page
$email = $_COOKIE['ID_my_site'];
// $pass = $_COOKIE['Key_my_site'];
$check = mysql_query("SELECT * FROM customers WHERE email = '$email'")or die(mysql_error());
while($info = mysql_fetch_array( $check )) {
if ( $_SESSION["cu_id"] == $info['cu_id'] ) {
header("Location: members.php");
}
}
}
//if the login form is submitted
if ( count($_POST) ) { // if form has been submitted
// makes sure they filled it in
if(!$_POST['email'] | !$_POST['pass']) {
die('You did not fill in a required field. Click here to return to the previous page and try it again.');
}
// checks it against the database
if (!get_magic_quotes_gpc()) {
$_POST['email'] = addslashes($_POST['email']);
}
$check = mysql_query("SELECT * FROM customers WHERE email = '".$_POST['email']."'")or die(mysql_error());
//Gives error if user dosen't exist
$check2 = mysql_num_rows($check);
if ($check2 == 0) {
die('That user does not exist in our database. Click Here to Register');
}
$_POST['pass'] = stripslashes($_POST['pass']);
$info['password'] = stripslashes($info['password']);
$_POST['pass'] = md5($_POST['pass']);
while($info = mysql_fetch_array( $check )) {
//echo '['.$_POST['pass'].'] == ['.$info['password'].'] ';
//gives error if the password is wrong
if ( $_POST['pass'] != $info['password'] ) {
//echo '['.$_POST['pass'].'] == ['.$info['password'].']';
die('Incorrect password, please try again. Click here to return to the previous page and try it again.');
} else {
// if login is ok then we add a cookie
$_POST['email'] = stripslashes($_POST['email']);
$hour = time() + 3600;
setcookie('ID_my_site', $_POST['email'], $hour);
// setcookie(Key_my_site, $_POST['pass'], $hour);
//then redirect them to the members area
// session_start();
$_SESSION["cu_id"] = $info['cu_id'];
header("Location: members.php");
}
}
}
// hmmm, not logged in ...
?>