<?php

	include('config.php');

	dbConn();

	$valid = 0;

	if (isset($_POST['email']) && isset($_POST['password'])) {

		$email = mysql_real_escape_string($_POST['email']);
		$password = md5($_POST['password']);

		$user_sql = mysql_query("SELECT * FROM cms_members WHERE email = '" . $email . "' AND password = '" . $password . "' AND confirmed = '1'") or die(mysql_error());

		if (mysql_num_rows($user_sql) == 1) {

			$user = mysql_fetch_object($user_sql);

			session_start();
			$_SESSION['member_id'] = $user->member_id;
			$_SESSION['tsname'] = $user->display_name;
			$_SESSION['tsjoindate'] = $user->join_date;

			$_SESSION['email'] = $user->email;
			$_SESSION['password'] = $user->password;

			header('Location: index.php');
			exit();

		}
	}

	$section_header = "Login";

	include('mod_html_top.php');

?>

<form action="" method="POST">
<table width="500" border="0" align="center" cellpadding="0" cellspacing="5">
<?php
	if (isset($_POST['email']) || isset($_POST['password'])) {
		echo '<tr><td colspan="2"><div align="center" class="brown18px">e-mail address and/or password are incorrect!</div></td></tr>';
	}
?>
  <tr>
    <td><div align="right">e-mail address</div></td>
    <td><input name="email" type="text" value="" maxlength="255"/></td>
  </tr>
  <tr>
    <td><div align="right">password</div></td>
    <td><input name="password" type="password" value="" maxlength="255"/>&nbsp;<a href="login_reset.php">forget password?</a></td>
  </tr>
  <tr>
    <td colspan="2"><div align="center"><input type="submit" value="     login     " name="login" style="width:170px;"></div></td>
  </tr>
</table>
</form>
<?php
	include('mod_html_middle.php');
	include('mod_side_new_photosets.php');
	include('mod_side_rate_models.php');
	include('mod_side_rate_photosets.php');
	include('mod_html_bottom.php');