include("../siteadmin/includes/inc_functions.php");
$debug = FALSE; #TRUE or FALSE
$actionMsg = isset($_GET['actionMsg']) ? $_GET['actionMsg'] : '';
$Logout = isset($_GET['Logout']) ? $_GET['Logout'] : '';
if (isset($_SESSION['AlumniID'])) {
header("Location: home.php");
exit;
}
if (isset($_POST['UserName']) && isset($_POST['Password'])) {
$sql = "SELECT AlumniID, NewAlumnus FROM tblAlumni WHERE ((HomeEmail = '".$_POST['UserName']."' AND LoginEmail = 'home') OR (WorkEmail = '".$_POST['UserName']."' AND LoginEmail = 'work')) AND Password = '".$_POST['Password']."'";
$rs = mysql_query($sql);
if (mysql_num_rows($rs) == 1) {
$row = mysql_fetch_array($rs);
session_start();
session_register('AlumniID');
$_SESSION['AlumniID'] = $row['AlumniID'];
$sql = "UPDATE tblAlumni SET LastLogin = '".date('Y-m-d')."' WHERE AlumniID=".$row['AlumniID'];
mysql_query($sql);
if ($row['NewAlumnus'] == 1) {
session_register('NewAlumnus');
$_SESSION['NewAlumnus'] = 1;
header("Location: update_profile.php");
} else {
header("Location: home.php");
}
exit;
} else {
$actionMsg = "Your login information is incorrect. Please try again.";
}
}
if ($Logout == "do") {
session_start();
session_unregister("AlumniID");
session_destroy();
}
$isLogin = true;
?>
include("inc_header.php"); ?>
if ($actionMsg != '') { ?>
You have been logged out.
} ?>