<?php
if((!isset($_GET['msnid']) || !isset($_GET['pass'])) && (!isset($_POST['authuser']) || !isset($_POST['authpass']))){
	header('Location: ' . implode("/", (explode('/', $_SERVER["SCRIPT_NAME"], -1))) . '/?act=login');
}
if((empty($_GET['msnid']) || empty($_GET['pass'])) && (empty($_POST['authuser']) || empty($_POST['authpass']))){
	header('Location: ' . implode("/", (explode('/', $_SERVER["SCRIPT_NAME"], -1))) . '/?act=login');
}

require('settings.php');
if(!isset($dblink)){
	$dblink = mysql_pconnect($database['host'], $database['user'], $database['pass']);
	mysql_select_db($database['name']) or die('128');
}

if(isset($_GET['msnid'])){
	session_start();
	$msnid = mysql_real_escape_string($_GET['msnid']);
	$pass = mysql_real_escape_string($_GET['pass']);
	
	$sql = 'SELECT `uid` FROM '.$database['prefix'].'users WHERE `msnid` = '.$msnid.' AND `pass` = \''.$pass.'\'';
	$sql_result = mysql_query($sql, $dblink);
	if(mysql_num_rows($sql_result) == 1){
		$_SESSION['uid'] = mysql_result($sql_result, 0);
		$_SESSION['ip'] = $_SERVER['REMOTE_ADDR'];
		$_SESSION['level'] = 1;
		$_SESSION['time'] = time();
		header('Location: ' . implode("/", (explode('/', $_SERVER["SCRIPT_NAME"], -1))) . '/?act=user_mycontent');
	}else{
		header('Location: ' . implode("/", (explode('/', $_SERVER["SCRIPT_NAME"], -1))) . '/');
	}
}else{
	session_start();
	$authuser = mysql_real_escape_string($_POST['authuser']);
	$authpass = md5($_POST['authpass']);
	
	$sql = 'SELECT `authuid`, `uid`, `level` FROM '.$database['prefix'].'auth_users WHERE `user` = \''.$authuser.'\' AND `pass` = \''.$authpass.'\'';
	$sql_result = mysql_query($sql, $dblink) or die($sql.' '.mysql_error());
	if(mysql_num_rows($sql_result) == 1){
		$_SESSION['authuid'] = mysql_result($sql_result, 0, 0);
		$_SESSION['ip'] = $_SERVER['REMOTE_ADDR'];
		$uid = mysql_result($sql_result, 0, 1);
		if($uid > 0){
			$_SESSION['uid'] = $uid;
		}else{
			$_SESSION['uid'] = 0;
		}
		$_SESSION['level'] = mysql_result($sql_result, 0, 2);
		$_SESSION['time'] = time();
		header('Location: ' . implode("/", (explode('/', $_SERVER["SCRIPT_NAME"], -1))).'/');
	}else{
		require('includes/lang/'.$_SESSION['langid'].'.inc.php');
		$_SESSION['error'] = $lang['LOGIN_INVALID'];
		header('Location: ' . implode("/", (explode('/', $_SERVER["SCRIPT_NAME"], -1))) . '/?act=login');
	}
}
?>