<?php
include_once('config.inc.php');

	
session_start();

function rand_string($len =  10 ){
	$e = base64_encode(pack("h*", sha1(mt_rand())));
	return substr(strtr($e, "+/=", "xyz"),  0 , $len);
}

function check_email($email){
	$pattern_email="~^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*$~i";
	return preg_match($pattern_email, $email);
}

function captcha_image(){
	header ('Content-type: image/png');
	$image = @imagecreate( 110 ,  24 );
	$background = imagecolorallocate($image,  51 , 153 , 153 );
	$text_colour = imagecolorallocate($image,  255 ,  204 ,  102 );
	#    imagestring($image,  5 ,  9 ,  4 , $_SESSION['captcha'], $text_colour);
	imagettftext($image,  11 ,  0 ,  10 ,  19 , $text_colour, '../tahoma.ttf', $_SESSION['captcha']);
	imagepng($image);
	imagedestroy($image);
	exit;
}

if (isset($_GET['image'])) { //create the image
	if(empty($_SESSION['captcha']))exit;
	captcha_image();
} else {  // html section
	if ((isset($_POST['login'])) and (isset($_POST['email'])) and (isset($_POST['password']))) { //Проверка, нажата ли кнопка входа в систему
		$link = mysql_connect($dbhost, $dbuser, $dbpasswd) or die(mysql_error());
		mysql_select_db($db, $link) or die(mysql_error());
		$query_select_user = sprintf($stub_query_select_user, mysql_real_escape_string($_POST['email']), mysql_real_escape_string($_POST['password']));
		$result_select_user = mysql_query($query_select_user) or die(mysql_error());
		if($row_select_user = mysql_fetch_array($result_select_user)) {
			$_SESSION['email'] = $row_select_user['email'];
			$page_header = sprintf($stub_page_header, 'Login page', '<META HTTP-EQUIV="Refresh" CONTENT="3; URL=http://'.$_SERVER['HTTP_HOST'].'/">');
			echo $page_header;
			?>
			<h1>Welcome back!</h1>
			You have logged in as <?=htmlspecialchars($_SESSION['email'])?>
			<?php
			exit;
		} else {
			$page_header = sprintf($stub_page_header, 'Login page', '');
			echo $page_header;
			?>
			<h1>Authorisation failed</h1>
			Either email or password you've supplied is incorrect. Please try again or register new account.
			<?php
			}
		} elseif (isset($_POST['register'])) { //Проверка, нажжата ли кнопка регистрации
			if(check_email($_POST['email'])){
				if($_POST['captcha'] == $_SESSION['captcha']){
					$link = mysql_connect($dbhost, $dbuser, $dbpasswd) or die(mysql_error());
					mysql_select_db($db, $link) or die(mysql_error());
					$query_insert_user = sprintf($stub_query_insert_user, mysql_real_escape_string($_POST['email']), mysql_real_escape_string($_POST['password']));
					$result_insert_user = mysql_query($query_insert_user) or die(mysql_error());
					$_SESSION['email'] = $_POST['email'];
					$page_header = sprintf($stub_page_header, 'Login page', '<META HTTP-EQUIV="Refresh" CONTENT="3; URL=http://'.$_SERVER['HTTP_HOST'].'/">');
					echo $page_header;
					$mail_registration_body = sprintf($stub_mail_registration_body, htmlspecialchars($_POST['email']), htmlspecialchars($_POST['password']));
					mail($_SESSION['email'], "New account registration.", $mail_registration_body, $mail_registration_header);
					?>
					<h1>Welcome aboard!</h1>
					You have succesfuly registered new user for email <?=htmlspecialchars($_SESSION['email'])?> and now loged on.
					<?php
					exit;
				} else {
					$page_header = sprintf($stub_page_header, 'Login page', '');
					echo $page_header;
					?>
					<h1>Wrong CAPTCHA code</h1>
					Please try again with new CAPTCHA code if you're human being.
					<?php
				}
			} else {
				$page_header = sprintf($stub_page_header, 'Login page', '');
				echo $page_header;
				?>
				<h1>Wrong email</h1>
				The email you've supplied is not correct. Please enter correct one.
				<?php
			}
		} else {
			$page_header = sprintf($stub_page_header, 'Login page', '');
			echo $page_header;
			?>
			<h1>Introduce yourself</h1>
			<?php
		}
	
	}
	$_SESSION['captcha'] = rand_string();
	?>

<table style="text-align: left; width: 572px;" border="1" cellpadding="2" cellspacing="2">

  <tbody>

    <tr>

      <td style="text-align: left; width: 243px;">
Please login, if you're registered user</td>

      <td style="text-align: left; width: 317px;">or
register, if you're a new one</td>

    </tr>

    <tr>

      <td style="width: 243px;" class="rightline">
      <form method="post" action="login.php" name="login"> <br>

        <table style="text-align: left; width: 100%;" border="1" cellpadding="2" cellspacing="2">

          <tbody>

            <tr>

              <td style="text-align: right;">email:</td>

              <td><input maxlength="100" size="10" name="email"></td>

            </tr>

            <tr>

              <td style="text-align: right;">password: </td>

              <td><input maxlength="10" size="10" name="password" type="password"></td>

            </tr>

            <tr align="center">

              <td> </td><td align=left><input name="login" value="login" type="submit"></td>

            </tr>

          </tbody>
        </table>

        <br>

      </form>

      </td>

      <td style="width: 317px;">
      <form method="post" action="login.php" name="register"> <br>

        <table style="text-align: left; width: 270px; height: 252px;" border="1" cellpadding="2" cellspacing="2">

          <tbody>

            <tr>

              <td style="text-align: right;">email:</td>

              <td><input maxlength="100" size="10" name="email"></td>

            </tr>

            <tr>

              <td style="text-align: right;">password:</td>

              <td><input maxlength="10" size="10" name="password" type="password"></td>

            </tr>

            <tr>

              <td style="text-align: right;">CAPTCHA code:</td>

              <td><img src="http://<?=$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF']?>?image" alt="captcha image" height="24" width="110"></td>

            </tr>

            <tr>

              <td style="text-align: right;">enter CAPTCHA
code:</td>

              <td><input maxlength="10" size="10" name="captcha"></td>

            </tr>

            <tr align="center">

              <td> </td><td align=left><input name="register" value="register" type="submit"></td>

            </tr>

          </tbody>
        </table>

      </form>

      </td>

    </tr>
  </tbody>
</table>
    
</body>
</html>