<?php
rg_log("FILE: /inc/login/login");

$user = trim(rg_var_str('user'));
$pass = trim(rg_var_str('pass'));
$login_token = trim(rg_var_str('login_token'));
$lock_ip = rg_var_uint('lock_ip');

$_login = "";

$errmsg = array();

while ($rg['doit'] == 1) {
	if (!rg_valid_referer()) {
		$errmsg[] = "invalid referer; try again";
		break;
	}

	if (!rg_token_valid($db, $rg, 'login', FALSE)) {
		$errmsg[] = "invalid token; try again";
		break;
	}

	$r = rg_user_login_by_user_pass($db, $user, $pass, $login_token,
		$rg['ip'], $lock_ip, $rg['https'], $rg['hostname'],
		$rg['login_ui']);
	if ($r['ok'] !== 1) {
		$errmsg[] = $r['errmsg'];
		break;
	}

	// redirect to home page
	$url = rg_re_userpage($rg['login_ui']);
	rg_redirect($url);
}

// hints
$hints = array();
$hints[]['HTML:hint'] = rg_template("user/hints/login.html", $rg, TRUE /*xss*/);
$rg['HTML:login_hints'] = rg_template_table("hints/list", $hints, $rg);

$rg['user'] = $user;
$rg['pass'] = $pass;
$rg['login_token'] = $login_token;
$rg['HTML:errmsg'] = rg_template_errmsg($errmsg);
$rg['forgot_send'] = rg_re_url("/op/forgot_send");
$rg['create_account'] = rg_re_url("/op/create_account");
$rg['rg_form_token'] = rg_token_get($db, $rg, 'login');
$_login .= rg_template("user/login.html", $rg, TRUE /*xss*/);