<?php
defined("XOOPS_ROOT_PATH") OR DIE();

if (empty($_POST['uname']) || empty($_POST['pass'])) {
?>
<h2><?php echo _USER_LOGIN; ?></h2>

<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
		<div class="xo-formfield required">
			<label><?php echo _USERNAME; ?></label>
			<input type="text" name="uname" size="26" maxlength="25" value="" />
		</div>
		<div class="xo-formfield required">
			<label><?php echo _PASSWORD; ?></label>

			<input type="password" name="pass" size="21" maxlength="32" />
		</div>
		<div class="xo-formbuttons">
			<button type="submit"><?php echo _LOGIN; ?></button>
		</div>
		<input type="hidden" name="xoops_redirect" value="/upgrade/index.php" />
</form>
<?php
} else {

    $myts =& MyTextsanitizer::getInstance();
    $uname = !isset($_POST['uname']) ? '' : $myts->addSlashes( trim($_POST['uname']) );
    $pass = !isset($_POST['pass']) ? '' : $myts->addSlashes( trim($_POST['pass']) );
    
    $member_handler =& xoops_gethandler('member');
    
    include_once XOOPS_ROOT_PATH.'/class/auth/authfactory.php';
    if (!@include_once XOOPS_ROOT_PATH.'/language/' . $upgrade_language . '/auth.php') {
        include_once XOOPS_ROOT_PATH.'/language/english/auth.php';
    }
    $xoopsAuth =& XoopsAuthFactory::getAuthConnection($uname);
    $user = $xoopsAuth->authenticate($uname, $pass);
    
    // For XOOPS 2.2*
    if (!is_object($user)) {
        $criteria = new CriteriaCompo(new Criteria('loginname', $uname));
        $criteria->add(new Criteria('pass', md5($pass)));
        list($user) = $member_handler->getUsers($criteria);
    }
    
    $isAllowed = false;
    if (is_object($user) && $user->getVar('level') > 0) {
        $isAllowed = true;
        if ($xoopsConfig['closesite'] == 1) {
            $groups = $user->getGroups();
            if (in_array(XOOPS_GROUP_ADMIN, $groups) || array_intersect($groups, $xoopsConfig['closesite_okgrp'])) {
                $isAllowed = true;
            }  else {
                $isAllowed = false;
            }
        }
    }
    if ($isAllowed) {
        $user->setVar('last_login', time());
        if (!$member_handler->insertUser($user)) {
        }
        // Regenrate a new session id and destroy old session
        $GLOBALS["sess_handler"]->regenerate_id(true);
        $_SESSION = array();
        $_SESSION['xoopsUserId'] = $user->getVar('uid');
        $_SESSION['xoopsUserGroups'] = $user->getGroups();
        $user_theme = $user->getVar('theme');
        if (in_array($user_theme, $xoopsConfig['theme_set_allowed'])) {
            $_SESSION['xoopsUserTheme'] = $user_theme;
        }
        
        // Set cookie for rememberme
        if ( !empty($xoopsConfig['usercookie']) ) {
            if ( !empty($_POST["rememberme"]) ) {
                setcookie($xoopsConfig['usercookie'], $_SESSION['xoopsUserId'], time() + 31536000, '/',  '', 0);
            } else {
                setcookie($xoopsConfig['usercookie'], 0, -1, '/',  '', 0);
            }
        }
    }
    
    header("location: " . XOOPS_URL . "/upgrade/index.php");
    exit();
}
?>