// connect to database
include 'includes/pt_globalphp.phtml';
pt_dbconnect();
if (isset($submit)) {
$q1 = ("SELECT * FROM user_info WHERE user_name='$uname'");
$rq1 = mysql_query($q1);
$mrq1 = mysql_fetch_array($rq1);
$user_id = $mrq1[0];
$role_id = $mrq1[3];
if ( $uname == "advisor" AND $password == "barnowl") {
?>
FWAG Knowledge Base Logon
include "addadvisor.phtml";
}
elseif ($uname == "" || ereg("^[[:space:]]",$uname) || $password =="" || ereg("^[[:space:]]",$password) || $password != $mrq1[2] || $uname != $mrq1[1]){
?>
FWAG Knowledge Base Logon
echo "no entry";
}
elseif ( $mrq1[2] == $password AND $mrq1[1] == $uname) {
//setcookie("fwag",$userid,time()+3600);
?>
FWAG Knowledge Base Logon
$q4 = ("SELECT lasttime from user_info where user_id='$user_id'");
$rq4 = mysql_query($q4);
$mrq4 = mysql_fetch_array($rq4);
$lasttime = $mrq4['lasttime'];
if ($lasttime == 0) {
$time = time();
$lasttime = $time - 2500000;
}
$q5 = ("UPDATE user_info set updatetime = '$lasttime' where user_id = '$user_id'");
$rq5 = mysql_query($q5);
pt_checktime();
?>
include 'header.phtml';
include 'frontpage.phtml';
}
}
else {
?>
FWAG Knowledge Base Logon