root/EMS/login.php

<?
    require_once("common.php");

    if($_SESSION['_config']['access'] >= 90)
    {
        header("location: admin.php");
        exit;
    } else if($_SESSION['_config']['access'] > 0) {
        header("location: home.php");
        exit;
    }

    require_once("radauth.php");

    $process = 0;
    if($_POST['process'] != "")
        $process = 1;

    $username = strip_tags(trim($_POST['username']));
    $password = strip_tags(trim($_POST['password']));
    $errmsg = "";

    if($process)
    {
        if(($retval = RADIUS_AUTHENTICATION($username,$password)) == 2)
        {
            $_SESSION['_config']['username'] = $username;
            if($username == "root")
            {
                $_SESSION['_config']['access'] = 90;
                header("location: admin.php");
            } else {
                $_SESSION['_config']['access'] = 10;
                header("location: home.php");
            }

            exit;
        }

        $errmsg = "Incorrect username and/or password";
    }

    include_once("header.php");
?>
    <div class="bodytext" style="padding:12px;" align="justify">
<? if($errmsg) { ?><p style="color:red;"><?=$errmsg?></p><? } ?>
        <p>Please enter your username and password below to log into your account.</p>
        <form method="post" action="<?=$_SERVER['REQUEST_URI']?>">
        <label for="username" style="width:75px;float:left;clear:left;">Username:</label> <input type="text" name="username" value="<?=$username?>"><br />
        <label for="password" style="width:75px;float:left;clear:left;">Password:</label> <input type="password" name="password"><br />
        <label for="process" style="width:75px;float:left;clear:left;">&nbsp;</label> <input type="submit" value="Login"><br />
        <input type="hidden" name="process" value="1">
        </form>
    </div>
<? include_once("footer.php"); ?>