<?php
include('functions.inc');
require('classes/PHPMailerAutoload.php');
date_default_timezone_set('Asia/Kolkata');

dbConnect();

$statuss = array('online','offline');
$modes = array('Rupees','Units');

$remoteip = getIP(); 
//initialize session variables and session
session_start();

if (isset($_SESSION['sessionid'])) {
        //check session and session variables        
        $sessionid = $_SESSION['sessionid'];
        $user = $_SESSION['user'];
        $role = $_SESSION['role'];

} else if (isset($_POST['login']) && $_POST["txtID"]) {
        //authenticate sign in
        $uid = trim($_POST["txtID"]);
        $pwd = trim($_POST["txtPWD"]);

        $role = strtolower((ldapAuth($uid, $pwd) ? localAuth($uid, $pwd) : 'public'));

        $sessionid = base64_encode($uid.'-'.$pwd);
        $_SESSION["user"] = "$uid";
        $_SESSION["role"] = "$role";
        $_SESSION["sessionid"] = "$sessionid";
        //session information
        mysql_query("insert into websessions(userid,remoteip,action,datesession)
        values('$uid','$remoteip','login',now())");
        header("Location: .");

}

if ($_REQUEST['logout'] == 1) {
        //check for sing out signal
        //session information

        mysql_query("insert into websessions(userid,remoteip,action,datesession)
        values('$user','$remoteip','logout',now())");

        //reset session variables
        $_SESSION['user'] = "";
        $_SESSION['role'] = "";
        $user = "";
        $role = "";

        //finally destroy current session
        session_destroy();
        header("Location: .");

}
//session_destroy();
//log activity in access log database

accessLog($user, $referer, $url, $remoteip);


if ($mybp) {
	$flatno = strtoupper($_REQUEST["flatno"]);
	$sr = mysql_query("select * from el_licensee where flatno='$flatno'");
} else {
	$sr = mysql_query("select * from el_licensee where email='$user@iiita.ac.in'");
}
//get licensee details
while ($q = mysql_fetch_object($sr)) {
        $flatno = $q->flatno;
        $fullname = $q->fullname;
        $designation = $q->designation;
        $email = $q->email;
        $category = $q->category;
        $admissibility = $q->admissibility;
}

//get admissibility mode
$sr = mysql_query("select * from el_config");
while ($q = mysql_fetch_object($sr)) {
        $subsidymode = $q->subsidymode;
}

?>