<?
include '../cms/connect.php';
session_start();
session_register("loginflag");
session_register("username_session");

//Added addslashes
/*$sql="select * from loginmaster where user_login='".addslashes($txt_uname)."' and user_pass='".addslashes($txt_pass)."'
and user_status='Y'";
*/
// member login using password encription

$sql="select * from loginmaster where user_login='".addslashes($txt_uname)."' and encr_pass='".md5($txt_pass)."'
and user_status='Y'";


$rs_sql=mysql_query($sql);

if(mysql_num_rows($rs_sql)>0)
{
    $rs=mysql_fetch_array($rs_sql);
    $loginflag='Y';
    $username_session=$rs["user_login"];

                   unset($_POST[txt_uname]);
      unset($_POST[txt_pass]);
      $_POST[txt_uname]=md5('a ');
      $_POST[txt_pass]=md5('b ');

    echo "<script>window.location.href='../index.php'</script>";
} else {
    $loginflag='N';
    echo "<script>alert('Invalid Username or Password, Please try again.')</script>";
    echo "<script>window.location.href='../index.php'</script>";
}

public function authenticate($username, $password){
        $authenticated = false;
        $this->openDB();
        
        $md5_password = md5($password);
        
        $query = "SELECT * FROM users WHERE username = '".$username."' LIMIT 1";
        
        if(!$result = $this->db->query($query)){
            die("Error: ".$this->db->error);
        }
        
        $row = $result->fetch_assoc();
        
        if($row['md5_password'] == $md5_password){
            $authenticated = true;
        }
        
        $this->closeDB();
        return $authenticated;
    }