<?
session_start();
include('admin/db.php'); 
$_POST = mysql_real_escape_array($_POST);

if($_POST[ahd_username] && $_POST[ahd_password]) {
	$pass = md5($_POST[ahd_password]); 
	echo $pass;
	$result = mysql_query("SELECT * FROM users WHERE username = '$_POST[ahd_username]' AND `password` = '$pass' AND validate = ''");
	if(mysql_num_rows($result) > 0) {
		$_SESSION[username] = $_POST[ahd_username]; 
		$_SESSION[password] = md5($_POST[ahd_password]); 
		$row = mysql_fetch_array($result); 
		$_SESSION[userid] = $row[record_num];
		$_SESSION[email] = $row[email]; 
		$_SESSION[user_level] = $row[user_level];
		$_SESSION[ip] = $_SERVER[REMOTE_ADDR]; 
		if($_REQUEST[ref]) { 
			header("Location: ".urldecode($_REQUEST[ref]));
		}
		else {
			header("Location: /my_profile.php");
		}
		exit();
	}
}
$title = "Incorrect Login!";
$headertitle = "Incorrect Login!";
include($basepath.'/templates/template.overall_header.php'); ?>
<span style='color: #ff0000;'>The login information you have provided was incorrect. Please try again.</span>
<table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td valign="top" scope="row" align='center'>
      <form id="form1" name="form1" method="post" action="/login_auth.php">
        <table width="300" border="0">
          <tr>
            <td width="80">Username</td>
            <td width="210"><input name="ahd_username" type="text" id="ahd_username" size="35" maxlength="255" /></td>
          </tr>
          <tr>
            <td>Password</td>
            <td><input name="ahd_password" type="password" id="ahd_password" size="35" maxlength="35" /></td>
          </tr>
          <tr>
            <td colspan="2" align="center"><a href='<? echo $basehttp; ?>/forgot_pass.php'>Forgot Password?</a><br />
            <input type='submit' name="Submit" id="button" value="Login" /></td>
          </tr>
        </table>
    </form></td>
  </tr>
</table>
<br />           
<? include($basepath.'/templates/template.overall_footer.php'); ?>