// login.inc.php
// Process logins for Torque account management
require("../includes/default.inc.php");
SessionStart();
if (isLoggedIn())
Redirect("manage.php");
$op = $_GET['op'];
switch($op) {
case "process":
login_process();
break;
case "":
case "login":
login_main();
break;
default:
ErrorOut("Invalid directive.");
break;
}
?>
function login_process() {
// Process the user's login
if ($_POST['exec'] != "1")
die();
$email = $_POST['email'];
$passwd = $_POST['passwd'];
// Check for blank input
if ($email == "" || $passwd == "")
Redirect("login.php?op=login&msg=Please+specify+an+e-mail+address+and+password.&redir={$_GET['redir']}");
// Verify the user's credentials
if (($user_id = VerifyCredentials($email, $passwd)) === false)
Redirect("login.php?op=login&msg=Invalid+email+or+password+combination.&redir={$_GET['redir']}");
// Get the user's profile array
$profile = UserGet($user_id);
// Check if the user is inactive
if ($profile['active'] == "0")
Redirect("login.php?op=login&msg=__act&email=$email&redir={$_GET['redir']}");
// Check if the user is locked
if ($profile['locked'] == "1")
Redirect("login.php?op=login&msg=" . urlencode("Your account has been suspended. {$profile['locked_reason']}") . "&redir={$_GET['redir']}");
// Set up the variables
$_SESSION['user_id'] = $profile['id'];
$_SESSION['user_email'] = $profile['email'];
$_SESSION['user_password'] = $profile['password'];
$_SESSION['user_has_tge'] = (($profile['has_tge'] == "1") ? true : false);
$_SESSION['user_has_tse'] = (($profile['has_tse'] == "1") ? true : false);
$_SESSION['user_has_t2d'] = (($profile['has_t2d'] == "1") ? true : false);
// Set up the session flag
$_SESSION['logged_in'] = true;
// Redirect
if ($_GET['redir'] != "")
Redirect($_GET['redir']);
else
Redirect("manage.php");
}
function login_main() {
// Main login page
PrintHeader("Network Account Management Login");
echo "You may log into your account management panel to administer your TorqueDev Network account. From the management screen you can authorize additional products, change your contact information or password, close your account, or perform other account maintenance actions.
";
echo "