<?php
	include 'MS.php';
	$UserNameL = $PasswordL = "";
	$UserNameErrL = $PasswordErrL = "";
	$errorL = 0;
	
	if (!empty($_POST["login"])) {
		if (empty($_POST["usernameL"])) {
			$UserNameErrL = "UserName is required";
			$errorL++;
		}
		else {
			$UserNameL = test_input2($_POST["usernameL"]);
			$UserNameL = filter_var($UserNameL, FILTER_SANITIZE_STRING);
			if (!preg_match("/^[a-zA-Z0-9]*$/", $UserNameL)) {
				$UserNameErrL = "UserName can only have letters and numbers";
				$errorL++;
			}
		}
		
		if (empty($_POST["passwordL"])) {
			$PasswordErrL = "Password is required";
			$error++;
		}
		else {
			$PasswordL = test_input2($_POST["passwordL"]);
			$PasswordL = filter_var($PasswordL, FILTER_SANITIZE_STRING);
			if (!preg_match("/^[a-zA-Z0-9]*$/", $PasswordL)) {
				$PasswordErrL = "Password can only have letters and numbers";
				$errorL++;
			}
		}
		
		if ($errorL == 0) {
			Login($UserNameL, $PasswordL, $ServerName, $ServerUserName, $ServerPassword);
		}
	}
	
	function test_input2($data)
	{
		$data = trim($data);
		$data = stripslashes($data);
		$data = htmlspecialchars($data);
		return $data;
	}
	
	function ActivityLog($UserName, $ServerName, $ServerUserName, $ServerPassword)
	{
		$Status = "in";
		$IP = $_SERVER["REMOTE_ADDR"];
		
		//Create Connection
		$conDataBase = new mysqli($ServerName, $ServerUserName, $ServerPassword);
		if ($conDataBase->connect_error) {
			die ("Connection Failed");
		}
		
		$sql = "INSERT INTO brentswelding.activitylog (username,status,ipaddress) VALUES('".$UserName."','".$Status."','".$IP."');";
		if ($conDataBase->query($sql) === TRUE) {
			$conDataBase->close();
			return;
		}
		else {
			$conDataBase->close();
			die("Fatal Error");
		}
	}
	
	function Login($UserNameL, $PasswordL, $ServerName, $ServerUserName, $ServerPassword)
	{
		session_start();
		$dbname = "brentswelding";
		
		//Create Connection;
		$conDataBase = new mysqli($ServerName, $ServerUserName, $ServerPassword);
		if ($conDataBase->connect_error) {
			die ("Connection failed");
		}
		
		$user = mysqli_escape_string($conDataBase, $UserNameL);
		$pass = mysqli_escape_string($conDataBase, $PasswordL);
		
		$sql = "select * from brentswelding.users where username='".$user."' and password='".$pass."';";
		$result = mysqli_query($conDataBase, $sql);
		$row = mysqli_fetch_array($result, MYSQLI_ASSOC);
		$count = mysqli_num_rows($result);
		
		if ($count == 1) {
			$_SESSION["username"] = $UserNameL;
			session_write_close();
			$conDataBase->close();
			ActivityLog($UserNameL, $ServerName, $ServerUserName, $ServerPassword);
			echo("<script>window.location = 'MyAccount.php';</script>");
		}
		else {
			session_write_close();
			$conDataBase->close();
			echo ("<p>Wrong UserName or Password</p>");
		}
	}
?>