Scripter gezocht

<?php						
if (empty($_SESSION['username'])) { 
// geen sessie
	if (empty($_COOKIE['username']) && $_POST['submit']) { 
	// nog geen cookie of cookie zonder waarde, wel gesubmit
		if (empty($_POST['username'])) { 
			$error .= 'Je bent je gebruikersnaam vergeten in te vullen.';
		}
		if (empty($_POST['password'])) {
			$error .= 'Je bent je wachtwoord vergeten in te vullen.';
		} else {
		// username en pass ingevoerd, controleren
			$sql = mysql_query("SELECT user_id,username,user_password,user_active FROM phpbb_users WHERE username = '".trim($_POST['username'])."'",$dbforum) or die ('Error bij login - 1');
			if (mysql_num_rows($sql) < 1) {
				$error .= 'De ingevoerde username bestaat niet.';
			} else {
				while ($rij = mysql_fetch_array($sql)) {
					if ($rij['user_active'] != 1) {
						echo 'Je account is nog niet geactiveerd.';
					} else {
						$pass = md5(trim($_POST['password']));
						if ($rij['user_password'] != $pass) {
							$error .= "Het ingevoerde wachtwoord is onjuist.";
						} elseif ($rij['user_password'] == $pass) {
							$sql_ban = mysql_query("SELECT ban_userid FROM phpbb360_banlist WHERE ban_userid = '".$rij['user_id']."'",$dbforum) or die ('Error bij login - 2');
							if (mysql_num_rows($sql_ban) == 1) {
								echo 'Je account is geband.';
							} elseif (mysql_num_rows($sql_ban) == 0) {
							// ingelogd
								$_SESSION['username'] = $rij['username'];
								if ($_POST['ingelogdblijven'] == 1) {		
									setcookie("username", $rij['username'], time()+3600*24*90); 
									setcookie("user_password", $rij['user_password'], time()+3600*24*90); 		
								}
								$sql_crew = mysql_query("SELECT level FROM fp_crew WHERE username='".trim($_POST['username'])."' AND user_id = '".$rij['user_id']."' ",$dbfp) or die ('Error bij login - 3'); 
								if (mysql_num_rows($sql_crew) == 1) {
									while ($rij_crew = mysql_fetch_array($sql_crew)) {
										if ($rij_crew['level'] == 'crew' || $rij_crew['level'] == 'admin') { 
											$_SESSION['level'] = $rij_crew['level']; 
										}
									}
								}
								// redirect
								header('Location: '.$redirect);
							}
						}
					}
				}
			}
		}
		if (!empty($error)) {
			echo $error;
			echo '<p><a href=javascript:history.go(-1)>« terug</a>';
		}
	// END if (empty($_COOKIE['username']) && $_POST['submit'] OR $submit)
	} elseif (!empty($_COOKIE['username']) && !empty($_COOKIE['user_password'])) {
	// cookie gevuld, login check
		$sql = mysql_query("SELECT user_id,username,user_password,user_active FROM phpbb_users WHERE username = '".$_COOKIE['username']."'",$dbforum) or die ('Error bij login - 1');
		if (mysql_num_rows($sql) < 1) {
			$error .= 'Je username bestaat niet (meer).';
		} else {
			while ($rij = mysql_fetch_array($sql)) {
				if ($rij['user_active'] != 1) {
					echo 'Je account is nog niet geactiveerd.';
				} else {
					if ($rij['user_password'] != $_COOKIE['user_password']) {
						$error .= 'Het wachtwoord in je cookie is onjuist.';
					} elseif ($rij['user_password'] == $_COOKIE['user_password']) {
						$sql_ban = mysql_query("SELECT ban_userid FROM phpbb360_banlist WHERE ban_userid = '".$rij['user_id']."'",$dbforum) or die ('Error bij login - 2');
						if (mysql_num_rows($sql_ban) == 1) {
							echo 'Je account is geband.';
						} elseif (mysql_num_rows($sql_ban) == 0) {
						// ingelogd
							$_SESSION['username'] = $_COOKIE['username'];
							$sql_crew = mysql_query("SELECT level FROM fp_crew WHERE username = '".$_COOKIE['username']."' AND user_id = '".$rij['user_id']."' ",$dbfp) or die ('Error bij login - 3'); 
							if (mysql_num_rows($sql_crew) == 1) {
								while ($rij_crew = mysql_fetch_array($sql_crew)) {
									if ($rij_crew['level'] == 'crew' || $rij_crew['level'] == 'admin') { 
										$_SESSION['level'] = $rij_crew['level']; 
									}
								}
							}
							// redirect
							header('Location: '.$redirect);
						}
					}
				}
			}
		}
		if (!empty($error)) {
			echo $error;
			echo '<p><a href=javascript:history.go(-1)>« terug</a>';
		}
	//END elseif (!empty($_COOKIE['username']) && !empty($_COOKIE['user_password']))
	} else {
	// loginformulier
	?>
		<form method="post" action="<?php echo $PHP_SELF; ?>">
		<table border="0" cellpadding="0" cellspacing="0" class="content"><tr><td>
		Login met je PS3 / PSP / Xbox 360 Only gegevens<p>
		<input type="hidden" value="submit" name="submit">
		<b>Gebruikersnaam:</b><br>
		<input type="text" name="username" size="20" class="textfield">
		<b>Wachtwoord:</b><br>
		<input type="password" name="password" size="20" class="textfield">
		<input type="checkbox" name="ingelogdblijven" value="1"> Ingelogd blijven<br>
		<div align="right"><input type="image" name="submit" src="templimages/button_login.gif" class="button_login"></div>
		<a href="/forum/profile.php?mode=sendpassword" style="font-size: 9px;">Wachtwoord vergeten?</a><br>
		<a href="/forum/profile.php?mode=register" style="font-size: 9px;">Aanmelden</a>
		</td></form></tr></table>
	<?
	}
// END if (empty($_SESSION['username'])) 
} elseif ($_SESSION['username'] != "") { 
// gewoon ingelogd
	echo '<b>Je bent ingelogd,<br> '.$_SESSION['username'].'.</b>';					
	if ($_SESSION['level'] == 'crew' || $_SESSION['level'] == 'admin') {
		echo '<br><a href="admpanel/index.php">Crewpanel</a><br>';
	}
	echo '<p><a href="uitloggen.php">Uitloggen</a>';
	echo '<br><a href="/forum/profile.php?mode=editprofile">Profiel bewerken</a>';				
}
?>