display('login'); } function index_post() { global $renderer; global $router; // TODO: change the password encryption method $query = doquery("SELECT * FROM {{table}} WHERE username='".$_POST["username"]."' AND password='".md5($_POST["password"])."' LIMIT 1", "users"); if (mysqli_num_rows($query) != 1) { $renderer->simple("Connexion error", "Invalid username or password. Please go back and try again."); } $row = mysqli_fetch_array($query); if (isset($_POST["rememberme"])) { $expiretime = time()+31536000; $rememberme = 1; } else { $expiretime = 0; $rememberme = 0; } $cookie = $row["id"] . " " . $row["username"] . " " . md5($row["password"] . "--" . $dbsettings["secretword"]) . " " . $rememberme; setcookie("dkgame", $cookie, $expiretime, "/", "", 0); $router->redirect("/"); }