<?php
 
  if(isset($_POST['login'],$_POST['password'])) {
    $dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`online`) AS `online` FROM `users` WHERE `login`='{$_POST['login']}' AND `pass`=MD5('{$_POST['password']}')");
    if(($data = mysql_fetch_object($dbres)) && $data->activated == 1) {
    }
  }
?>
<table align="center" width=100%>
<?php /* ------------------------- */
  if($_GET['x'] == "logout"){
    session_unset($_SESSION['pass']);
    session_destroy($_SESSION['login']);
	session_unset($_SESSION['pass']);
    session_destroy($_SESSION['login']);
    echo"<table width=100% align=center>
		   <tr><td class=subTitle><b>Uitloggen :: Tot ziens</b></td></tr>
		   
		   <tr><td class=mainTxt>U bent nu uitgelogd. Een ogenblik geduld.<br><a href=index.php target=_top><b>Klik hier om door te gaan<b></a></td></tr>";
    echo"";
  }
  else if($_GET['x'] == "lostpass") {
      if(isset($_GET['id'],$_GET['code'])) {
      $dbres				= mysql_query("SELECT `login` FROM `temp` WHERE `id`='{$_GET['id']}' AND `code`='{$_GET['code']}' AND `area`='lostpass'");
      if($data = mysql_fetch_object($dbres)) {
        $dbres				= mysql_query("SELECT `login`,`email` FROM `users` WHERE `login`='{$data->login}'");
        $data				= mysql_fetch_object($dbres);


        $newpass			= rand(100000,999999);
        mysql_query("UPDATE `users` SET `pass`=MD5('{$newpass}') WHERE `login`='{$data->login}'");
        mysql_query("DELETE FROM `temp` WHERE `id`='{$_GET['id']}'");
        mail($data->email,"the enforcer password","Je wachtwoord is gereset, je kan nu inloggen met: $newpass","From: the enforcer <[email protected]>\n");
        print "Je nieuwe wachtwoord is verstuurt naar {$data->email}.\n";
      }
    }
    else if(isset($_POST['email'],$_POST['login'])) {
      $dbres				= mysql_query("SELECT `login`,`email` FROM `users` WHERE `login`='{$_POST['login']}' AND `email`='{$_POST['email']}'AND `activated`=1");
      if($data = mysql_fetch_object($dbres)) {
        $code				= rand(1000000000,9999999999);
        mysql_query("INSERT INTO `temp`(`login`,`code`,`area`,`time`) values('{$data->login}',$code,'lostpass',NOW())");
        $id				= mysql_insert_id();
        mail($data->email,"SilentUnit wachtwoord","Vraag je wachtwoord op deze link aan. \nhttp://www.swatcrime.bplaced.net/login.php?x=lostpass&id=$id&code=$code","From: Slentunit <[email protected]>");
        print "Er is een email met verdere instructies gestuurd naar: {$data->email}.\n";
      }
      else
        print "De gebruikersnaam komt niet overeen met het e-mailadres.\n";
    }


    print <<<ENDHTML
  <tr><td align="center">
	<form method="post">
	  <table width="100%" align="center">
        <tr> 
    <td class="subTitle"><b>Wachtwoord Vergeten</b></td>
  </tr>
  <tr><td>&nbsp;&nbsp;</td></tr>
  <tr> 
    <td class="mainTxt"><table width=100%>
		<tr> 
          <td width="49%"><div align="right">Gebruikersnaam:</div></td>
          <td width="2%">&nbsp;</td>
          <td width="49%"><input type="text" name="login"></td>
        </tr>
        <tr> 
          <td width="49%"><div align="right">E-mailadres:</div></td>
          <td width="2%">&nbsp;</td>
          <td width="49%"><input type="text" name="email"></td>
        </tr>
        <tr> 
          <td> <div align="center"> </div></td>
          <td>&nbsp;</td>
          <td><input name="submit" type="submit" style="width: 100" value="Ok"></td>
        </tr>
      </table></table>
    </form></td></tr>
ENDHTML;
  }
  elseif($data) {
    $time = time();
/*  if (($time - $data->online) < 60) { print "Je moet 60 seconden wachten voordat je weer kan inloggen.\n"; exit; }  */
if($data->activated == 0) { print "Je acount is nog niet geactiveerd.\n"; }
else {
  $_SESSION['login']		= $_POST['login'];
  $ip = $_SERVER['REMOTE_ADDR'];
  $dbres = mysql_query("SELECT * FROM `multiple` WHERE `ip`='$ip'");
  $allo = mysql_fetch_object($dbres);
  $allo = ($allo->allo == 1) ? 1 : 0;
  $exi = mysql_num_rows(mysql_query("SELECT * FROM `iplog` WHERE `ip`='$ip' AND `login`='{$_POST['login']}'"));
  if ($exi == 1) { mysql_query("UPDATE `iplog` SET `time`=NOW() WHERE `login`='{$_POST['login']}' AND `ip`='$ip'"); }
  else { mysql_query("INSERT INTO `iplog`(`login`,`ip`,`time`,`allo`,`status`) values('{$_POST['login']}','$ip',NOW(),'$allo','{$data->status}')"); }
  echo"<table width=100% align=center>
		   <tr><td class=subTitle><b>Inloggen</b></td></tr>
		   <tr><td>&nbsp;</td></tr>
		   <tr><td class=mainTxt>U bent nu ingelogd. Een ogenblik geduld.<br><a href=indexin.php target=_top> <b>Ga door<b></a></td></tr>";
    echo"";  
}
}
  else {
      if(isset($_POST['login'],$_POST['pass']))
      print "Verkeerde gebruikersnaam/wachtwoord.\n";


    print <<<ENDHTML
 <tr><td>
	<form method="post">
      <table width="100%" align="center">
        <tr> 
    <td class="subTitle"><b>Inloggen</b></td>
  </tr>
  <tr><td>&nbsp;&nbsp;</td></tr>
  <tr> 
    <td class="mainTxt"><table width=100%>
        <tr> 
          <td width="49%"><div align="right">Gebruikersnaam:</div></td>
          <td width="2%">&nbsp;</td>
          <td width="49%"><input type="text" name="login" maxlength=16 width="150"></td>
        </tr>
        <tr> 
          <td width="49%"><div align="right">Wachtwoord:</div></td>
          <td width="2%">&nbsp;</td>
          <td width="49%"><input type="password" name="password" maxlength=16 width="150"></td>
        </tr>
        <tr> 
          <td></td>
          <td></td>
          <td><input type="submit" name="submit" width="150" value="Login"></td>
        </tr>
        <tr> 
          <td colspan="3" align=center> <a href=login.php?x=lostpass>Wachtwoord 
            vergeten?</a></td>
        </tr>
      </table></table>
    </form>
  </td></tr>
ENDHTML;
  }
?>
</table>
</body>










</table>