include ("classes/initial.php"); include ("classes/config.inc.php"); include ("classes/Database.class.php"); include ("classes/functions.php"); include ("classes/Session.class.php"); $sitesession = new Session(); $sitesession->Session(); if (isset($_POST['submitaction'])) { $username = trim($_POST['username']); $password = trim($_POST['password']); if ($username=="" || $password=="") { $error_message = "All fields are mandatory"; }else { $chkrsq = $db->query("select * from users where Email='".$db->escape($username)."' and Status=1"); if (mysql_num_rows($chkrsq)==0) { $error_message = "Invalid credentials."; }else { $chkrs = mysql_fetch_assoc($chkrsq); if ($chkrs['Password']==$db->escape($password)) { $_SESSION['TUSERID'] = $chkrs['UserId']; $_SESSION['TFIRSTNAME'] = $chkrs['FirstName']; $_SESSION['TEMAIL'] = $chkrs['Email']; $_SESSION['TLOGINTIME'] = date("Y-m-d H:i:s"); if ($chkrs['Role']=="Admin") { $_SESSION['TROLE'] = "SUPERADMIN"; ?> }else { ?> } }else { $error_message = "Wrong credentials"; } } } } ?>