#!/usr/bin/perl

use strict;
use warnings;
use CGI;
use CGI qw(:standart);
use CGI::Carp qw(fatalsToBrowser);
use HTML::Template;
use Digest::MD5 qw(md5_hex);
use DBI;
require("config.cgi");

our %config;
my $cgi = CGI->new();
my $template = HTML::Template->new(filename => "$config{'path'}/check.tmpl");

my $user_input = CGI::param('user');
my $pass_input = CGI::param('pass');



if(($user_input eq "") || ($pass_input eq "")) 
{ 
$template->param(
                 path => $config{'htmlpath'},
        weiterleitung => "index.cgi",
                farbe => "red",
         checkausgabe => "Please insert your Username and Password"
                );
}










elsif((defined($user_input)) && (defined($pass_input))) 
{

my $user = md5_hex($user_input);
my $pass = md5_hex($pass_input);

        if(($user eq $config{'login_user'}) && ($pass eq $config{'login_pass'})) 
        {
        my $session_id = int(rand(9999999999));
        my $sid = md5_hex($session_id);

        $template->param(
                         path => $config{'htmlpath'},
                weiterleitung => "online.cgi?id=$sid",
                        farbe => "green",
                 checkausgabe => "Welcome <b>Master</b>"                        
                        );
        

        my $dbh = DBI->connect("dbi:mysql:$config{'mysql_db'}", "$config{'mysql_user'}", "$config{'mysql_pass'}");
        my $sth = $dbh->prepare("SELECT SessionID FROM session_id") || die "$DBI::errstr<br>";
        $sth->execute() || die "$DBI::errstr<br>";
        my $ausgabe = $sth->fetchrow_array();
        
                if($ausgabe eq "") 
                {
                        $sth = $dbh->prepare("INSERT INTO session_id SET SessionID=MD5('$session_id')") || die "$DBI::errstr<br>";
                        $sth->execute() || die "$DBI::errstr<br>";
                        $sth->finish(); 
                }
                else 
                {
                        $sth = $dbh->prepare("UPDATE session_id SET SessionID=MD5('$session_id')") || die "$DBI::errstr<br>";
                        $sth->execute() || die "$DBI::errstr<br>";
                        $sth->finish();                                 
                }

        }
        else 
        {
        $template->param(
                         path => $config{'htmlpath'},
                weiterleitung => "index.cgi",
                        farbe => "red",
                         checkausgabe => "Wrong Username or Password! Please try again ..."
                        );
        }
}










else 
{
$template->param(
                 path => $config{'htmlpath'},           
        weiterleitung => "index.cgi",
                farbe => "red",
         checkausgabe => "OH MY GOD <b> «ERROR» </b>"
                        );
}

print $cgi->header();
print $template->output();