<?php
session_start();
include ("games/conf.php");

if(strlen($_POST['user'])>0){
if(strlen($_POST['pass'])>0){
if (isset($_POST['user']) && isset($_POST['pass']))
{
$_POST['user'] = htmlspecialchars($_POST['user']);
$_POST['user'] = stripslashes($_POST['user']);
$_POST['user'] = trim($_POST['user']);

$_POST['pass'] = htmlspecialchars($_POST['pass']);
$_POST['pass'] = stripslashes($_POST['pass']);
$_POST['pass'] = trim($_POST['pass']);
       $login = mysql_real_escape_string($_POST['user']);
       $password = md5($_POST['pass'] . 'i7b5j9');
       $password = strrev($password);
       $query = "SELECT `username`,`ID`, 'passw' FROM `players_the_game` WHERE `username`='".$login."' AND `passw`='".$password."' LIMIT 1";
       $sql = mysql_query($query) or die("Возникла ошибка");

       if (mysql_num_rows($sql) == 1) {

           $row = mysql_fetch_assoc($sql);
           $_SESSION['user'] = $row['username'];
           $_SESSION['id'] = $row['ID'];
           $_SESSION['pass'] = $row['passw'];

$ip = $_SERVER['REMOTE_ADDR'];
mysql_query("UPDATE `players_the_game` SET `ip`='".$ip."' WHERE `username`='".$login."' AND `passw`='".$password."' LIMIT 1") or die ("Can't update");
mysql_query ("UPDATE `players_the_game` SET `last_entry`='".time()."' WHERE `username`='".$login."' AND `passw`='".$password."' LIMIT 1") or die ("Can't update");
mysql_query ("UPDATE `players_the_game` SET `online`='1' WHERE `username`='".$login."' AND `passw`='".$password."' LIMIT 1") or die ("Can't update");
mysql_query("INSERT INTO `online` (`id_session`, `putdate`) VALUES ('".$row['ID']."', '".time()."')");

echo "<script>location.href='/game.php?the=my_pokes'</script>";

       }
       else {
          echo "<script>alert('Не верный Логин или Пароль'); location.href='/index.php';</script>";
       }
}
}
else{
echo "<script>alert('Вы заполнили не все поля!'); location.href='/index.php';</script>";
}
}
else{
echo "<script>alert('Вы заполнили не все поля!'); location.href='/index.php';</script>";
}

?>