<?php
define('IN_CARD', true);
define('CURR_PAGE','login.php');
$templatesused = 'page_user_login';

include('include/lib.inc.php');

if ($action == 'logout') {
	$SESSION_site->logout();
	my_redirect_die(INDEX_PAGE);
}

if ($action == 'login') {
	$is_logged = false;
	$user_email = strtolower($user_email);
	$sql = "SELECT * FROM ". TBL_USR_PROFILE ." AS u LEFT JOIN ". TBL_USR_GROUP ." AS g ON (u.usergroup_id=g.usergroup_id) WHERE u.user_email='". addslashes(trim($user_email)) ."' AND u.user_password='". md5(trim($user_password)) ."' ";
	//$sqlo = "SELECT u.id as user_id, u.name as user_name, u.email as user_email, u.ip_address as user_ip, g.* FROM forum_members AS u RIGHT JOIN ". TBL_USR_GROUP ." AS g ON (g.usergroup_id='2')  WHERE LOWER(email)='". addslashes($user_email) . "' AND password='". md5($user_password) ."' LIMIT 1 ";
	$SESSION_site = new Session_site($sql,'su');
	if($SESSION_site->is_logged()) {
		$s = $SESSION_site->get_sid();
		$user = $SESSION_site->data;
		
		//while (list($key,$val) = each($user)) {
		//	echo $key . "=";
		//	echo $val . "<br />";
		//}
		
		if ($user['user_active'] != 1) {
			usr_message_die(GENERAL_ERROR,$msg['error_mem_not_activation'],'back');
		}
		
		$SESSION_site->set_var('user',$fuser);
		$is_logged = true;
		if (empty($user['user_id']) ) {
			$is_logged = false;
			$data = $DB_site->query_first($sql);
			if (!empty($data)) {
				$SESSION_site->assign_sql_row_data($data);
			}
			unset($data);
			unset($sql);
		}
		// cat access
		$cat_access = array();
		////$sql = "SELECT * FROM ". TBL_CARDS_CAT_PERMISSION ." WHERE usergroup_id='". $user['usergroup_id'] ."' ";
		//$data_arr = $DB_site->query($sql);
		//while($row = $DB_site->fetch_array($data_arr))
		//{
		//	$cat_access[$row['cat_id']] = $row['cat_id'];
		//}
		//$DB_site->free_result($data_arr);
		//$SESSION_site->set_var('cat_access',$cat_access);
		//$SESSION_site->update();
		unset($cat_access, $data_arr);
		if (!empty($ref)) {
			$url = urldecode($ref);
			$url = str_replace('|', '?', $url);
		}
		else {
			$url = INDEX_PAGE;
		}
		my_redirect_die($url);
	}
	else {
		$is_logged = false;
		usr_message_die(GENERAL_ERROR,$msg['error_mem_login_error'],'back');
	}
}
if (!empty($user['user_id'])) {
	$sql = " UPDATE ". TBL_USR_PROFILE ." SET last_login = current_login WHERE user_id='". $user['user_id'] ."' "; 
	$DB_site->query($sql);
	$sql = " UPDATE ". TBL_USR_PROFILE ." SET current_login = '". $sys_tmp_vars['now'] ."' WHERE user_id='". $user['user_id'] ."' "; 
	$DB_site->query($sql);
	my_redirect_die(USR_MEMBER_PAGE);
}

include(ROOT_DIR.'include/page_header.php');
/* ################################### PAGE ############################## */
$url_ref = !empty($ref)? urlencode($ref) : urlencode(urldecode($url_ref));
$t->set_var(array(
	'URL_REF' => $url_ref
));
$t->set_file(array('body' => 'page_user_login.html'));
$t->parse('output','body');
$t->p('output');
include(ROOT_DIR.'include/page_footer.php');
?>