<?php

#—————————————————————> CMS Termit <—————————————————————-#
#                                                         #
#                 Author: Ilya Rudomilov                  #
#                                                         #
#                 E-mail: ilya@grafix.ru                  #
#               URL: http://ilya.grafix.ru                #
#                       ICQ: 203015                       #
#                                                         #
#——————————————> GrafiX Design — (c) 2005 <——————————————-#

session_register("auth_id","admin_id","auth_permissions");

if (!isset($HTTP_SESSION_VARS['auth_id']))
    {
    if (isset($HTTP_COOKIE_VARS["auth_login".COOKIE_ID],$HTTP_COOKIE_VARS["auth_password".COOKIE_ID])) //Автоматическая авторизация из кукисов
        {
        $result = query("SELECT `id` FROM `members` WHERE `login`='".strtolower($HTTP_COOKIE_VARS['auth_login'.COOKIE_ID])."' AND `password`='".$HTTP_COOKIE_VARS['auth_password'.COOKIE_ID]."' LIMIT 1;");
        if (mysql_num_rows($result)>0)
            {
            $result = mysql_fetch_array($result);
            $HTTP_SESSION_VARS['auth_id'] = $result[0];
            query("UPDATE `members` SET `ip_address`='".$HTTP_SERVER_VARS['REMOTE_ADDR']."' WHERE `id`=".$HTTP_SESSION_VARS['auth_id']." LIMIT 1;");
            if (($global_vars['module']!='auth') && ($global_vars['block']!='exit'))
                 {
                 setcookie ("auth_login".COOKIE_ID, $HTTP_COOKIE_VARS['auth_login'.COOKIE_ID], time()+604800);
                 setcookie ("auth_password".COOKIE_ID, $HTTP_COOKIE_VARS['auth_password'.COOKIE_ID], time()+604800);
                 }
            $result = query("SELECT g.* FROM `members_groups` g LEFT JOIN `members` m ON m.gid=g.id WHERE m.id=".$result[0]." LIMIT 1;");
            $data = mysql_fetch_array($result);
            $HTTP_SESSION_VARS['auth_permissions']['tcp'] = $data['tcp'];
            $HTTP_SESSION_VARS['auth_permissions']['acp'] = $data['acp'];
            $HTTP_SESSION_VARS['auth_permissions']['mcp'] = $data['mcp'];
            $HTTP_SESSION_VARS['auth_permissions']['cp'] = $data['cp'];

            if ($HTTP_SESSION_VARS['auth_permissions']['acp']==1)
                $HTTP_SESSION_VARS['admin_id'] = $HTTP_SESSION_VARS['auth_id'];
            }
        }
    }
elseif (isset($HTTP_GET_VARS['exit']))
    {
    //unset($HTTP_SESSION_VARS['auth_id'],$HTTP_COOKIE_VARS["auth_login".COOKIE_ID],$HTTP_COOKIE_VARS["auth_password".COOKIE_ID]);

    session_destroy();

    setcookie("auth_login".COOKIE_ID,"",time()-3600);
    setcookie("auth_password".COOKIE_ID,"",time()-3600);

    header("Location: ".$url);
    }

?>