<?php
 
$adminuser = "demo";
$adminpass = "demo";
 
function page_protect() {
session_start();
if (isset($_SESSION['HTTP_USER_AGENT']))
{
    if ($_SESSION['HTTP_USER_AGENT'] != md5($_SERVER['HTTP_USER_AGENT']))
    {
	unset($_SESSION['authuser']);
	session_destroy();
	unset($_SESSION['HTTP_USER_AGENT']);
    header("Location: index.php");
        exit;
    }
}
}
function loginpage($error) {
echo "<form action='" . $_SERVER['REQUEST_URI'] . "' method='post'>
<div align='center'>
<input class='login' type='text' name='username' id='username' /></div>
<div align='center'><input class='login' type='password' name='password' id='password'></div>
<div  align='center'><input class='migtukas' type='submit' value=' Login &raquo; ' name='login'></div>";
	exit;
}
 
$username = $_POST['username'];
$password = $_POST['password'];
$login    = $_POST['login'];
 
session_start();
if($_SERVER['QUERY_STRING'] == "logout") {
	unset($_SESSION['authuser']);
	session_destroy();
	unset($_SESSION['HTTP_USER_AGENT']);
header("Location: index.php");
	exit;
}
if($_SESSION['authuser'] != $adminuser) {
	if(!$login) {
		loginpage(false);
	}
	elseif(($username != $adminuser) || ($password != $adminpass)) {
		loginpage(true);
	}
	else {
		$_SESSION['authuser'] = $adminuser;
		$_SESSION['HTTP_USER_AGENT'] = md5($_SERVER['HTTP_USER_AGENT']);
		header("Location: " . $_SERVER['REQUEST_URI']);
	}
}
function iMEMBER() {
 
if ($_SESSION['authuser'] == $adminuser) {
return 1;
} else { return 0 ;
}
}
session_write_close();
?>

 
<?php 
include "login.php";
page_protect();
 ?>