require("config.php");


if (isset($_POST['submit']))
{
	// use sleep for anti brute-force
	sleep(1);
	
	$query = mysql_query("SELECT * FROM `Members` WHERE `nickname`='" .$_POST['nickname']. "'")
	
	if (empty($_POST['nickname']) OR empty($_POST['password']))
	{
		echo("You forgot something");
		header("Refresh: 5; url=index.php");
		die;
	}
	elseif (mysql_num_rows($query) == 0)
	{
		echo("This nickname exist.");
		header("Refresh: 5; url=index.php");
		die;
	}
	else
	{
		$query = mysql_query("SELECT * FROM `Members` WHERE `nickname`='" .$_POST['nickname']. "'");
		$result = mysql_fetch_assoc($query);
		
		if (md5($_POST['password']) == $result['password'])
		{
			echo("You are logged in, please wait 5 secondes.");
			$_SESSION['nickname'] = strtolower($_POST['nickname']);
			mysql_query("UPDATE `Members` SET `onlinetime`='"  .time(). "' WHERE `nickname`='" .strtolower($_POST['nickname']). "'");
			header("Refresh: 5; url=index.php");
			die;
		}
		else
		{
			echo("Wrong password.");
			header("Refresh: 5; url=index.php");
			die;
		}
	}
}

require("config.php");


if (isset($_POST['submit']))
{
	// use sleep for anti brute-force
	sleep(1);
	
	// with mysql_real_escape_string
	$nickname = mysql_real_escape_string($_POST['nickname']);
	$password = mysql_real_escape_string($_POST['password']);
	
	$query = mysql_query("SELECT * FROM `Members` WHERE `nickname`='" .$nickname. "'")
	
	if (empty($nickname) OR empty($password))
	{
		echo("You forgot something");
		header("Refresh: 5; url=index.php");
		die;
	}
	elseif (mysql_num_rows($query) == 0)
	{
		echo("This nickname exist.");
		header("Refresh: 5; url=index.php");
		die;
	}
	else
	{
		$query = mysql_query("SELECT * FROM `Members` WHERE `nickname`='" .$nickname. "'");
		$result = mysql_fetch_assoc($query);
		
		if (md5($password) == $result['password'])
		{
			echo("You are logged in, please wait 5 secondes.");
			$_SESSION['nickname'] = strtolower($nickname);
			mysql_query("UPDATE `Members` SET `onlinetime`='"  .time(). "' WHERE `nickname`='" .strtolower($nickname). "'");
			header("Refresh: 5; url=index.php");
			die;
		}
		else
		{
			echo("Wrong password.");
			header("Refresh: 5; url=index.php");
			die;
		}
	}
}