<?php
include_once "functies.php";
?>


<div class="title">Inloggen</div>
<div class="box">
<table cellspacing="1" cellpadding="1" width="200" align="center">
<?
if(inlogcontrole()){
  echo "Je bent al ingelogd.";
}
if(isset($_POST['submit'])){
  $sql = $db->prepare("SELECT id, paswoord FROM leden WHERE login=:login LIMIT 1"); 
  $sql->bindParam(':login', $_POST['login'], PDO::PARAM_STR);
  $sql->execute(); 
  $aantal = $sql->rowcount();
  $list = $sql->fetch( PDO::FETCH_ASSOC ); 
  if($aantal == '0'){
	echo "De login werd niet gevonden in de database.";
  }elseif($list['paswoord'] != md5($_POST['pasw'])){
	echo "Het wachtwoord is verkeerd.";
  }else{
	echo "Je bent ingelogd.";
	$tijd = time();
$getal = rand(1,856);
$hash = md5($tijd+$getal);
$lengte = 60*60*24*365;
setcookie("s-g_gebnaam", $_POST['login'], time() + $lengte, "/");
setcookie("s-g_id", $list['id'], time() + $lengte, "/");
setcookie("s-g_hash", $hash, time() + $lengte, "/");


setcookie("s-g_gebnaam", $_POST['login'], time() + $lengte);
setcookie("s-g_id", $list['id'], time() + $lengte);
setcookie("s-g_hash", $hash, time() + $lengte);
unset($_SESSION);
$dbres = $db->prepare("UPDATE leden SET hash='".$hash."' WHERE login=:login LIMIT 1");
$dbres->bindParam(':login', $_POST['login'], PDO::PARAM_STR);
$dbres->execute(); 
die ("<script>window.parent.location = '?url=home';</script>");
  }
}else{
?>
<form method="post">


<b>Gebruikersnaam:<b /><input type="text" name="login" /><br />
<b>Wachtwoord:<b /><input type="password" name="pasw" /><br />
<input type="submit" name="submit" value="Login" /><br />
</form>
<?
}
?>
</table>
</div>