session_start();
$pth=$_SERVER["DOCUMENT_ROOT"] . "/../data/";
require_once($pth."config_erik_ng.inc");
/*
* TMA 20060629 modificata
*/
function login($id_count="",$id_reg="",$butt=""){
global $DBHOST,$DBNAME,$DBPASS,$DBUSER;
require_once('includes/cscAss.inc');
ob_start();
mysql_connect($DBHOST,$DBUSER,$DBPASS);
mysql_select_db($DBNAME) or die("Errore nel DB");
$quer="SELECT t1.id_region,t1.id_country,t1.description as regione,t2.id,t2.description as nazione FROM region as t1,country as t2 where t1.id_country=t2.id ORDER BY t2.description,t1.description";
$res=mysql_query($quer) or die("Errore nella QUERY ".mysql_error());
if (mysql_num_rows($res)==0) {
print <<Main Menu
EOQ;
$out=ob_get_contents();
ob_end_clean();
return $out;
}
ob_end_clean();
ob_start();
foreach( $_GET as $key => $val ) {
$getParam .= $key."=".$val."&";
}
$ut=$_SERVER['REMOTE_USER'];
$data_n=date("d/m/Y");
print <<
 |
Login |
Welcome to the ERIK Network Registered Users Area
Please login by providing your account |
|
EOQ;
$out['doc_body']=ob_get_contents();
ob_end_clean();
return $out;
}
if( isset($_REQUEST['utente']) ) {
$conn=mysql_connect($DBHOST,$DBUSER,$DBPASS) or die("No connection");
mysql_select_db($DBNAME,$conn) or die("NO DB !!");
$nome="'".trim($_REQUEST['utente'])."'";
$pass=trim($_REQUEST['pwd']);
$query="SELECT * FROM utenti WHERE email=".$nome;
$res=mysql_query($query) or die(mysql_error());
if ($ris=mysql_fetch_assoc($res)){
if($ris['password']==$pass){
$_SESSION['user_local_id']=$ris['id'];
}
}
$query="SELECT id,password FROM contact_data WHERE email=".$nome;
$res=mysql_query($query) or die(mysql_error());
if ($ris=mysql_fetch_assoc($res)){
if($ris['password']==$pass){
$_SESSION['user_local_id']="R_".$ris['id'];
}
}
}
if (!isset($_SESSION['user_local_id'])){
$out=login($_REQUEST['sel_country'],$_REQUEST['sel_region'],$_REQUEST['Search']);
print_page($tpl_file_s['login_user'],$out);
exit;
} else {
foreach( $_GET as $key => $val ) {
$getParam .= $key."=".$val."&";
}
$header = "location: search.php?".$getParam;
header( $header );
}
?>