<?php
if(isset($_GET['logout'])){
	if($_GET['logout']=="true"){
		session_destroy();
		$chkuser=false;
		echo"<script language=\"javascript\">window.location=\"index.php\";</script>";
	}
}
if(isset($_SESSION["nameuser"])){
	$chkuser=true;
}else{
	$chkuser=false;
	if(isset($_POST['txtname']) && isset($_POST['txtpass'])){
		if($_POST['txtname']<>"" && $_POST['txtpass']<>""){
			$sql="Select tb_user.*,tb_prefix.prefixnamel From tb_user INNER JOIN tb_prefix On tb_user.prefixid=tb_prefix.prefixid Where username='".$_POST['txtname']."' And pw='".md5($_POST['txtpass'])."'";
			echo $sql;
			$rs=rsquery($sql);
			$n=mysql_num_rows($rs);
			if($n==0){
				$chkuser=false;
				echo"<script language=\"javascript\">alert('ชื่อผู้ใช้ หรือ รหัสผ่าน ไม่ถูกต้อง');</script>";
			}else{
				$fuser=mysql_fetch_array($rs);
				session_register("iduser");
				$_SESSION['iduser']=$fuser['iduser'];
				session_register("status");
				$_SESSION['status']=$fuser['statusUser'];
				$chkuser=true;
				session_register("user");
				$_SESSION['nameuser']=$fuser['nameuser']."&nbsp;".$fuser['surname'];
				session_register("avatar");
				$_SESSION['avatar']=$fuser['avatar'];
			}
		}
	}
}
if($chkuser==false){
	echo"<form name=\"frmadd\" method=\"POST\" action=\"\">";
	echo"<label>User name :</label><br />";
	echo"<input class=\"txt1\" type=\"text\" name=\"txtname\" id=\"txtname\" autocomplete=\"off\" /><br />";
	echo"<label>Password :</label><br />";
	echo"<input class=\"txt1\" type=\"password\" name=\"txtpass\" id=\"txtpass\" autocomplete=\"off\" /><br />";
	echo"<input class=\"bt1\" type=\"submit\" value=\"ลงชื่อเข้าใช้\" style=\"width:80px;margin-top:5px;\" />";
	echo"</form>";
}else{
	?>
	<ul class="login">
		<h3><?php echo _avatar($_SESSION['avatar']);?></h3>
		<li><img src="images/addbk_16.gif"/>&nbsp;สวัสดี <?php echo $_SESSION['nameuser']?></li>
		<li class="icon"><a href="index.php?option=editaccount">แก้ไขข้อมูลส่วนตัว</a></li>
		<li class="icon"><a href="?logout=true">ออกจากระบบ</a></li>
	</ul>
	<?php
	
}
?>