<?php
rg_log("FILE: /inc/login/login");

$user = rg_var_str("user");
$pass = rg_var_str("pass");
$login_token = rg_var_str("login_token");
$lock_ip = rg_var_uint("lock_ip");

$_login = "";

$errmsg = array();

while ($rg['doit'] == 1) {
	if (!rg_valid_referer()) {
		$errmsg[] = "invalid referer; try again";
		break;
	}

	if (!rg_token_valid($db, $rg, 'login', FALSE)) {
		$errmsg[] = "invalid token; try again";
		break;
	}

	$r = rg_user_login_by_user_pass($db, $user, $pass, $login_token,
		$lock_ip, $rg['login_ui']);
	if ($r === FALSE) {
		$errmsg[] = rg_user_error();
		break;
	}

	// redirect to home page
	$url = rg_re_userpage($rg['login_ui']);
	rg_redirect($url);
}

$rg['user'] = $user;
$rg['pass'] = $pass;
$rg['login_token'] = $login_token;
$rg['HTML:errmsg'] = rg_template_errmsg($errmsg);
$rg['forgot_send'] = rg_re_url("/op/forgot_send");
$rg['create_account'] = rg_re_url("/op/create_account");
$rg['rg_form_token'] = rg_token_get($db, $rg, 'login');
$_login .= rg_template("user/login.html", $rg, TRUE /* xss */);
?>