<?
// login.php - performs validation 
$Username = $_POST["Username"];
$Password = $_POST["Password"];
$sn = isset($_POST['sn']) ? $_POST['sn'] : "";
// authenticate using form variables
$status = authenticate($Username, $Password);
// if  user/pass combination is correct
if ($status == 0)
// user/pass check failed
{
	// redirect to error page
	header("Location: error.php?e=2"); // Login error
	exit();
}
else
{
	// initiate a session
	session_start();
	
	// register some session variables
    	session_register("LLC");
    	if ($group == 'A'){session_register("ADMIN"); session_register("SUPER");}
    	if ($group == 'S'){session_register("SUPER");}
    	if ($group == 'C'){session_register("CFS");}
	// including the username
	session_register("UNAME");
	$UNAME = $Username;
	// add a record into log
	if ($sn == "")
	{	header("Location: functions.php"); }
	else
	{	header("Location: detail.php?sn=$sn"); }
	exit();
}

// authenticate username/password against a database
// returns: 0 if username and password is incorrect
//          GroupID if username and password are correct
function authenticate($user, $pass)
{
	//include(dirname(__FILE__)."/llc/includes/dbconfig.php");
	//include("/apps/web/mtsac/html/llc/includes/dbconfig.php");

	include("/includes/dbconfig.php");
	
	// check login and password
	// connect and execute query
	$connection = mysql_connect($db_host, $db_user, $db_pass) or die ("Unable to connect!");
	$query = "SELECT GroupID, Status from userlist WHERE username = '$user' AND password = PASSWORD('$pass')";
	mysql_select_db($db_name);
	$result = mysql_query($query, $connection) or die ("Error in query: $query. " . mysql_error());
	
	// if row exists -> user/pass combination is correct
	if (mysql_num_rows($result) == 1)
	{
		$row = mysql_fetch_row($result);
		global $group; 
		$group = $row[0];
		$ustatus = $row[1];
		if ($ustatus == '0' && $user != 'dchen')//user disabled
		{
			header("Location: error.php?e=5"); 
			exit();
		}	
		
		return 1;
	}
	// user/pass combination is wrong
	else
	{
		return 0;
	}
}

?>