<?php

#—————————————————————> CMS Termit <——————————————————————#
#                                                         #
#                 Author: Ilya Rudomilov                  #
#                                                         #
#                 E-mail: ilya@grafix.ru                  #
#               URL: http://ilya.grafix.ru                #
#                       ICQ: 203015                       #
#                                                         #
#——————————————> GrafiX Design — (c) 2005 <———————————————#

//- Модуль авторизации

//session_register("auth_id","admin_id","auth_permissions");

//if (!isset($_SESSION['auth_id'])) {
	//$_SESSION['auth_id'] = "";
	//$_SESSION['admin_id'] = "";
	//$_SESSION['auth_permissions'] = "";
  //}

function prolong_cookies() {

	setcookie('auth_permissions_tcp'.COOKIE_ID,$_COOKIE['auth_permissions_tcp'],time()+7200);
    setcookie('auth_permissions_acp'.COOKIE_ID,$_COOKIE['auth_permissions_acp'],time()+7200);
    setcookie('auth_permissions_mcp'.COOKIE_ID,$_COOKIE['auth_permissions_mcp'],time()+7200);
    setcookie('auth_permissions_cp'.COOKIE_ID,$_COOKIE['auth_permissions_cp'],time()+7200);
	setcookie('admin_id'.COOKIE_ID,$_COOKIE['admin_id'],time()+7200);
    setcookie('auth_id'.COOKIE_ID,$_COOKIE['auth_id'],time()+7200);
}

if (isset($_POST['admin_login'],$_POST['admin_password']))
    {
    $result=query("SELECT `m`.`id` FROM `members` `m` LEFT JOIN `members_groups` `g` ON `m`.`gid`=`g`.`id` WHERE `m`.`login`='".strtolower($_POST['admin_login'])."' AND `m`.`password`='".md5($_POST['admin_password'])."' AND `g`.`mcp`=1 LIMIT 1;");

    if (mysql_num_rows($result)==1)
        {
		$data = mysql_fetch_array($result);
		
        setcookie('admin_id'.COOKIE_ID,$data[0],time()+7200);
        setcookie('auth_id'.COOKIE_ID,$data[0],time()+7200);

        query("UPDATE `members` SET `ip_address`='".$_SERVER['REMOTE_ADDR']."' WHERE `id`='".$data[0]."' LIMIT 1;");

        $result = query("SELECT `g`.* FROM `members_groups` AS `g` LEFT JOIN `members` AS `m` ON `m`.`gid`=`g`.`id` WHERE `m`.`id`='".$data[0]."' LIMIT 1;");
        $data = mysql_fetch_array($result);
        setcookie('auth_permissions_tcp'.COOKIE_ID,$data['tcp'],time()+7200);
        setcookie('auth_permissions_acp'.COOKIE_ID,$data['acp'],time()+7200);
        setcookie('auth_permissions_mcp'.COOKIE_ID,$data['mcp'],time()+7200);
        setcookie('auth_permissions_cp'.COOKIE_ID,$data['cp'],time()+7200);

        header("Location: ./");
        }
    }
elseif (isset($_GET['exit']))
    {
    //unset($_COOKIE['admin_id'.COOKIE_ID]);

    setcookie("auth_login".COOKIE_ID,"",time()-3600);
    setcookie("auth_password".COOKIE_ID,"",time()-3600);
	setcookie("admin_id".COOKIE_ID,"",time()-3600);

    header("Location: ./");
    }
elseif (isset($_COOKIE['auth_id'])){
	prolong_cookies();
}
function auth() {
    print (join("",file("skin/system_login.htm")));
    die();
    }

function permission($permission) {
    global $_COOKIE;

    if ($_COOKIE['auth_permissions_'.$permission.COOKIE_ID]!=1)
        error(403);
		
    }

?>