<?php session_start();
    $username = $_POST['txt_nome1'];

        include_once('funzioni_bis.php'); $verifica = verifica($username);
    $username = $password = $userError = $passError = '';

    $username = $_POST['txt_nome1'];
    $password = $_POST['txt_pwd1'];
    $password= md5($password);



    if($password === $verifica){
                $ipip = $_SERVER['REMOTE_ADDR'];
                $sql_ultimo="UPDATE 0_users SET ultimo = now(), user_ip='$ipip' WHERE username='$username'";
                esegui_query($sql_ultimo);


                 $d1 = date("Y-m-d") ." 00:00:00 ";
                 $d2 = date("Y-m-d") ." 23:59:00";
                 $ora = date("H");
                 if ($ora<14){
                        $sql_controlla="SELECT * FROM 0_accessi WHERE  user='$username' AND mattina BETWEEN '$d1' AND '$d2'";
                        $sql_scrivi="INSERT INTO 0_accessi (id, user, mattina) ";
                 }else{
                        $sql_controlla="SELECT * FROM 0_accessi WHERE user='$username' AND pomeriggio BETWEEN '$d1' AND '$d2'";
                        $sql_scrivi="INSERT INTO 0_accessi (id, user, pomeriggio) ";
                 }
                $tab1 = tabella($sql_controlla);
                if (count($tab1)==0){
                    $sql_scrivi.="VALUES (NULL, '$username',now())";
                    esegui_query($sql_scrivi);
                }

                $_SESSION["autorizzato"] = 1;
                $_SESSION["username"] = $username;
                $_SESSION["login_time_stamp"] = time();
                $_SESSION["foto"] ="img/" .strtolower($username) .".png";
                header('LOCATION:preventivi.php'); //go to location after successful login.
                die();
    }

    //if($username !== 'Tony')
    //    $userError = 'Invalid Username';
    if($password !== $verifica)
        $passError = 'Password non corretta';

?>
<p><?php echo $passError; ?></p>
<p><a href="login.php" target="_SELF">Torna al Login</a></p>