<?php include('/home/***/public_html/admincp/server.php'; ?>

<?php

	

	// Connect to server and select databse.

	mysql_connect("$db_host", "$db_user", "$db_pass")or die("cannot connect"); 

	mysql_select_db("$db_name")or die("cannot select DB");



	SESSION_ID('login';

	SESSION_START('login';

	

	$username = $_POST['username'];

	$password = sha1(md5(sha1(sha1($_REQUEST['password']))));

	

	echo "<form method='post' name='loginform'>

			<label>Username</label>

			<input name='username' type='text' />

			<label>Password</label>

			<input name='password' type='password' />

			<input name='remember' type='checkbox' />

			<label>Remember Me</label>

			<input name='submit' type='submit' value='login'/>

		</form>";

	

	//protection

	$username = stripslashes($username);

	$password = stripslashes($password);

	$username = mysql_real_escape_string($username);

	$password = mysql_real_escape_string($password);

	

	//connect to the database here

	$sql="SELECT * FROM members WHERE username='$username' and password='$password'";

	$result=mysql_query($sql);

	$count=mysql_num_rows($result);

	//pass check

	$checkpass="SELECT password FROM members WHERE username='$username'";



	//login script

	if($_SERVER['REQUEST_METHOD'] == "POST")

	{

	

		if($count==1)

			{

				$_SESSION['valid'] = 1;//sets the session data for this user

				$_SESSION['username'] = $username;//sets session data username for later use.

				echo "Login Success!";

				

				if(isset($_POST['remember']) &&

					$_POST['remember'] == 'Yes'

						{

							setcookie("mycookie", "mycookie", time()+3600);

						}else{

							setcookie("mycookie", "mycookie", time()-3600);

						}

				echo "<meta http-equiv='REFRESH' content='2;url=https://www.****/admincp/index.php'>";

			}else

			{

				echo "<meta http-equiv='REFRESH' content='2;url=https://www.****/admincp/login.php'>";

				echo "Login Failed!";

			}

	}

?>

    

<?php

	//starts session for users not logged in

	session_start();

	//checks if logged in function

    function isLoggedIn()

{

    if(isset($_SESSION['valid']) && $_SESSION['valid'])

        return true;

    return false;

}



	if(isset($_COOKIE['mycookie']))

	{

		$_SESSION['valid'] = 1;

	}



	if(!isLoggedIn())

{

    echo "You are not logged in, please login to continue<br /><br /><a href='https://www.*****/admincp/login.php'>Login</a>";

}else{

echo "Welcome to the Administration Panel, " .$_SESSION['username']. "!<br /><a href='https://www.***/admincp/logout.php'>logout</a>";

}



?>

    

<?php

	setcookie("mycookie", "mycookie", time()-3600);

	SESSION_START();

    $_SESSION = array(); //destroy all of the session variables

    session_destroy();

	echo "<meta http-equiv='REFRESH' content='0;url=https://www.****.co.cc/admincp/login.php'>";

?>