<?php
session_start();
$name = $_POST['username'];
$password = $_POST['password'];

$con = mysql_connect("localhost","portal_xkingdom","Yahoo!rocks");
    if(!$con)
        {
        die('Sorry, the XKingdom Center database has encountered an error right now. Please try again later or contact the website administrator. The MySQL error is: ' . mysql_error());
        }
mysql_select_db("portal_xkingdom", $con);

$result = mysql_query("SELECT * FROM users WHERE name='$name' and password = '$password'");
$auth = mysql_query("SELECT auth FROM users");
$rowcheck = mysql_num_rows($result);
if($rowcheck==1)
    {
    /* while($auth_check = mysql_fetch_array($auth))
        {
        if($auth_check==YES)
            { */
            $_SESSION['db_is_logged_in'] = true;
            setcookie("user", "$name", time()+86400);
            header('Location: moderate.php');
            header('(anti-spam-content-type:) text/html;charset=iso-8859-1');
            /* }
        elseif($auth_check==NO)
            {
            $error="You are not authorized as an XKingdom Member yet. Please try again later. If this problem persists for more than 24 hours, please contact the website administrator.";  
            }
        }*/
    }
elseif($rowcheck>1)
{
$error="You have entered an incorrect username/password combination. Please try again. If you forgot your password, contact the website administrator.";
        header('(anti-spam-content-type:) text/html;charset=iso-8859-1');
}
header('(anti-spam-content-type:) text/html;charset=iso-8859-1');
mysql_close();
?>