#!/usr/bin/perl

use CGI::Carp qw(fatalsToBrowser);

use CGI qw(:all);
use CGI::Cookie;
use DBI;
use Digest::MD5 qw(md5_hex);

require("../functions.cgi");
require("../config.cgi");

%cookies = fetch CGI::Cookie;


if (defined($cookies{'user_id'}))
{
    print "Content-type: text/html\n\n";
    print "You are already logged in.";
    print "<script>window.location = 'index.cgi';</script>\n";
    exit;
}


if (!($ENV{'REQUEST_METHOD'} eq "POST"))
{
    {
        print "Content-type: text/html\n\n";
        print qq~

        <table border='1'>
        <form method="post" action="">
        <tr>
            <td>
                <b>Username:</b>
            </td>

            <td>
                <input type='text' length='30' name='form_user'>
            </td>
        </tr>

        <tr>
            <td>
                <b>Password:</b>
            </td>

            <td>
                <input type='password' length='30' name='form_pass'>
            </td>
        </tr>
        
        <tr>
            <td colspan='2'>
                <input type='submit'>
            </td>
        </tr>
        </form>
        </table>

        ~;
    }
}

else
    {
        $username = (param('form_user'));
        $userpass = (param('form_pass'));
        $userpass = md5_hex($userpass);

        #check the database

        my $dbh = DBI->connect("DBI:mysql:$edt_dbase", $mysql_user, $m
+ysql_pass) or print DBI->errstr;
        my $sth = $dbh->prepare("SELECT * FROM $users_table WHERE user
+name = '$username' AND user_password = '$userpass'");
        $sth->execute;
        
        if ($sth->rows < 1)
        {
            print "Content-type: text/html\n\n";
            print "Login information incorrect.";
            $dbh->disconnect;
            print "<script>window.location = 'login.cgi';</script>\n";
            exit;
        }

        else
        {
            

            while ($data = $sth->fetchrow_hashref)
            {
                $u_id = $$data{"user_id"};

                my $auth_user = new CGI::Cookie(-name        =>       
+ 'user_id',
                                                -value        =>      
+  $u_id);
     
                my $auth_pass = new CGI::Cookie(-name        =>       
+ 'user_pass',
                                                -value        =>      
+  $userpass);
                
                
                #$cookieset = $auth_user . ";" . $auth_pass;
                print "Set-Cookie: $auth_user\n";
                print "Set-Cookie: $auth_pass\n";
                
                print "Content-type: text/html\n\n";
                print "Welcome " . $username . ", you have successfull
+y logged in.\n";
                print "<script>window.location = 'index.cgi';</script>
+\n";
            }
        }
        $dbh->disconnect;

    }
    
    
}
print "(..)";
[download]