refresh

<?

session_start();

include("config.php");
include("functions.php");

if(!isset($_COOKIE['last_active']))
{
	if(isset($_SESSION['user_id']))
	{
		mysql_query("UPDATE tbl_users SET user_lastactive = NOW() WHERE user_id = '" . $_SESSION['user_id'] . "'") or die(mysql_error());
		setcookie("last_active",true,time()+5);
	}
}

if(!isset($_SESSION['user_id']))
{
	if(isset($_POST['login']))
	{
		$query = mysql_query("SELECT * FROM tbl_users WHERE user_name = '" . $_POST['user'] . "' AND user_pass = '" . md5($_POST['pass']) . "'");
		$result = mysql_num_rows($query);

		if(empty($result))
		{
			echo "<script>alert('Hata.'); document.location.href=('login.php')</script>";
		}
		else
		{
			while($row = mysql_fetch_assoc($query))
			{
				$user_id = $row['user_id'];
			}

			header("Location: login.php");
			$_SESSION['user_id'] = $user_id;
		}
	}
	else
	{
?>
<input type="hidden" value="1" name="login">
<table border="0" width="100%" id="table73">
	<tr>
		<td width="187"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
		Gebruikersnaam : </b> </td>
		<td> <input type="text" name="user" maxlength="15" size="31"></td>
	</tr>
	<tr>
		<td width="187"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
		Wachtwoord : </b> </td>
		<td> <input type="password" name="pass" maxlength="15" size="31"></td>
	</tr>
</table>
<table border="0" width="100%" id="table74">
	<tr>
		<td>&nbsp;</td>
		<td width="152">
<input type="submit" value="Login">
	</tr>
</table>
<address>
&nbsp;</address>
<table border="0" width="100%" id="table75">
	<tr>
		<td align="center">
<img src="images/icons/register.gif"> <a href="register.php">Registreren</a></td>
		<td align="center">
<img src="images/icons/memberlist.gif"> <a href="memberlist.php">Ledenlijst</a>
</table>
<?
	}
}
else
{
	$query = mysql_query("SELECT * FROM tbl_users WHERE user_id = '" . $_SESSION['user_id'] . "'");

	while($row = mysql_fetch_assoc($query))
	{
		echo "Gebruikersnaam : <b>" . $row['user_name']. "</b>";

		if($row['user_pm'])
		{
			$msg = mysql_result(mysql_query("SELECT COUNT(1) FROM tbl_msg WHERE msg_to = '" . $_SESSION['user_id'] . "'"),0);

			if(empty($msg))
			{
				$msg = "<font color=\"#008000\">Empty</font>";
			}
			elseif($msg >= $cfg['max_msg'])
			{
				$msg = "<font color=\"#FF0000\">FULL</font>";
			}
			else
			{
				$msg = $msg . " / " . $cfg['max_msg'];
			}

			echo "<br>\n";
			echo "Inbox : <b>". $msg ."</b> ( <a href=\"msg.php?act=inbox\">Bekijken</a> )";
		}
	}

	echo "<br>\n<br>\n";

	if(isset($_SESSION['admin_login']))
	{
		
		echo "<img src=\"images/icons/admin.gif\"> <a href=\"admin.php\">Admin</a>";
		echo "<br>\n";
	}

	echo "<img src=\"images/icons/memberlist.gif\"> <a href=\"memberlist.php\">Ledenlijst</a>";
	echo "<br>\n";
	echo "<img src=\"images/icons/profile.gif\"> <a href=\"profile.php?act=edit_profile\">Verander Profiel</a>";
	echo "<br>\n";
	echo "<img src=\"images/icons/profile.gif\"> <a href=\"profile.php?act=view&user_id=" . $_SESSION['user_id'] . "\">Bekijk Profiel</a>";
	echo "<br>\n";
	echo "<img src=\"images/icons/logoff.gif\"> <a href=\"logoff.php\">Uitloggen</a>";
}
?>