<?php

	/*
	* Include Session Class and Start New Session
	*/
	require_once("Session/main.class.php");
	$sess = new SessionManager;
	session_start();

	/*
	* Handle Sign In
	*/
	if (isset($SignIn)) {
		$GetSalt = mysql_query("SELECT salt FROM users WHERE username = '$User' LIMIT 1") or die(mysql_error());
		$GS = mysql_fetch_array($GetSalt);
		$Salt = base64_decode($GS['salt']);
		$HashedPass = hash_hmac("sha512", $Pass, $Salt);
		$Login = mysql_query("SELECT * FROM users WHERE username = '$User' AND password = '$HashedPass' LIMIT 1") or die(mysql_error());
		$LC = mysql_num_rows($Login);
		$L = mysql_fetch_array($Login);
		$User = $L['username'];
		$UserActivated = $L['activated'];
		$UserDisplayName = $L['display_name'];
		if ($LC > 0 && $UserActivated > 0) {
			unset($_SESSION[$SessLoggedIn]);
			unset($_SESSION[$SessUser]);
			unset($_SESSION[$SessSignInTime]);
			unset($_SESSION[$SessIP]);
			session_destroy();
			$UserGuest = $_SERVER['REMOTE_ADDR'];
			$CheckSignOut = mysql_query("SELECT * FROM ip_track WHERE user = '$UserGuest'");
			while ($CS = mysql_fetch_array($CheckSignOut)) {
				$SignIn = $CS['signin'];
				$LastActive = $CS['last_active'];
				$SignOut = $CS['signout'];
				$IP = $CS['ip'];
				if ($SignOut == "") {
					mysql_query("UPDATE ip_track SET signout = '$LastActive' WHERE user = '$UserGuest' AND signin = '$SignIn' AND ip = '$IP'");
				}
			}
			$sess = new SessionManager;
			session_start();
			$CheckSignOut = mysql_query("SELECT * FROM ip_track WHERE user = '$User'");
			while ($CS = mysql_fetch_array($CheckSignOut)) {
				$SignIn = $CS['signin'];
				$LastActive = $CS['last_active'];
				$SignOut = $CS['signout'];
				$IP = $CS['ip'];
				if ($SignOut = "") {
					mysql_query("UPDATE ip_track SET signout = '$LastActive' WHERE user = '$User' AND signin = '$SignIn' AND ip = '$IP'");
				}
			}
			$_SESSION[$SessLoggedIn] = true;
			$_SESSION[$SessUser] = $User;
			$SignInTime = date("Y-m-d H:i:s");
			$_SESSION[$SessSignInTime] = $SignInTime;
			$UserAgent = $_SERVER['HTTP_USER_AGENT'];
			$IP = $_SERVER['REMOTE_ADDR'];
			$_SESSION[$SessIP] = $IP;
			$UserTrack = mysql_query("INSERT INTO ip_track (user, signin, user_agent, ip) VALUES ('$User', '$SignInTime' , '$UserAgent', '$IP')");
			if (isset($Remember)) {
				setcookie($SessUser, $_SESSION[$SessUser], time()+60*60*24*100, "/");
			}
		}
	}

	/*
	* Create User Session If Cookie Exists
	*/
	if (isset($_COOKIE[$SessUser])){
		if (!isset($_SESSION[$SessLoggedIn]) && !isset($_SESSION[$SessUser]) && !isset($_SESSION[$SessSignInTime]) && !isset($_SESSION[$SessIP])) {
			$User = $_COOKIE[$SessUser];
			$check_account = mysql_query("SELECT * FROM users WHERE username = '$User' LIMIT 1") or die(mysql_error());
			$cac = mysql_num_rows($check_account);
			$L = mysql_fetch_array($check_account);
			$UserActivated = $L['activated'];
			if ($cac > 0 && $UserActivated > 0) {
				$UserGuest = $_SERVER['REMOTE_ADDR'];
				$CheckSignOut = mysql_query("SELECT * FROM ip_track WHERE user = '$UserGuest'");
				while ($CS = mysql_fetch_array($CheckSignOut)) {
					$signin = $CS['signin'];
					$LastActive = $CS['last_active'];
					$SignOut = $CS['signout'];
					$IP = $CS['ip'];
					if($SignOut == "") {
						mysql_query("UPDATE ip_track SET signout = '$LastActive' WHERE user = '$UserGuest' AND signin = '$signin' AND ip = '$IP'");
					}
				}
				$CheckSignOut = mysql_query("SELECT * FROM ip_track WHERE user = '$User'");
				while ($CS = mysql_fetch_array($CheckSignOut)) {
					$signin = $CS['signin'];
					$LastActive = $CS['last_active'];
					$SignOut = $CS['signout'];
					$IP = $CS['ip'];
					if($SignOut == "") {
						mysql_query("UPDATE ip_track SET signout = '$LastActive' WHERE user = '$User' AND signin = '$signin' AND ip = '$IP'");
					}
				}
				$_SESSION[$SessLoggedIn] = true;
				$_SESSION[$SessUser] = $User;
				$SignInTime = date("Y-m-d H:i:s");
				$_SESSION[$SessSignInTime] = $SignInTime;
				$UserAgent = $_SERVER['HTTP_USER_AGENT'];
				$IP = $_SERVER['REMOTE_ADDR'];
				$_SESSION[$SessIP] = $IP;
				$UserTrack = mysql_query("INSERT INTO ip_track (user, signin, user_agent, ip) VALUES ('$User', '$SignInTime' , '$UserAgent', '$IP')");
			}
			else {
				setcookie($SessUser, "", time()-60*60*24*100, "/");
			}
		}
	}

	/*
	* Create Guest Session
	*/
	if (!isset($_SESSION[$SessLoggedIn]) && !isset($_SESSION[$SessUser]) && !isset($_SESSION[$SessSignInTime]) && !isset($_SESSION[$SessIP])) {
		$_SESSION[$SessLoggedIn] = false;
		$_SESSION[$SessUser] = "Guest";
		$User = $_SERVER['REMOTE_ADDR'];
		$CheckSignOut = mysql_query("SELECT * FROM ip_track WHERE user = '$User' ORDER BY id DESC");
		while ($CS = mysql_fetch_array($CheckSignOut)) {
			$SignIn = $CS['signin'];
			$LastActive = $CS['last_active'];
			$SignOut = $CS['signout'];
			$IP = $CS['ip'];
			if ($SignOut == "") {
				mysql_query("UPDATE ip_track SET signout = '$LastActive' WHERE user = '$User' AND signin = '$SignIn' AND ip = '$IP'");
			}
		}
		$SignInTime = date("Y-m-d H:i:s");
		$_SESSION[$SessSignInTime] = $SignInTime;
		$UserAgent = $_SERVER['HTTP_USER_AGENT'];
		$IP = $_SERVER['REMOTE_ADDR'];
		$_SESSION[$SessIP] = $IP;
		$UserTrack = mysql_query("INSERT INTO ip_track (user, signin, user_agent, ip) VALUES ('$User', '$SignInTime' , '$UserAgent', '$IP')");
	}

	/*
	* Update Session Info
	*/
	if (isset($_SESSION[$SessLoggedIn]) && isset($_SESSION[$SessUser]) && isset($_SESSION[$SessSignInTime]) && isset($_SESSION[$SessIP])) {
		$User = $_SESSION[$SessUser];
		if ($User == "Guest") {
			$User = $_SERVER['REMOTE_ADDR'];
		}
		$LastActiveTime = date("Y-m-d H:i:s");
		$SignInTime = $_SESSION[$SessSignInTime];
		$IP = $_SESSION[$SessIP];
		mysql_query("UPDATE ip_track SET last_active = '$LastActiveTime' WHERE user = '$User' AND signin = '$SignInTime' AND ip = '$IP'");
	}

	/*
	* Handle Sign Out
	*/
	if (isset($SignOut)) {
		setcookie($SessUser, "", time()-60*60*24*100, "/");
		$User = $_SESSION[$SessUser];
		$SignOutTime = date("Y-m-d H:i:s");
		$SignInTime = $_SESSION[$SessSignInTime];
		$IP = $_SESSION[$SessIP];
		mysql_query("UPDATE ip_track SET signout = '$SignOutTime' WHERE user = '$User' AND signin = '$SignInTime' AND ip = '$IP'");
		unset($_SESSION[$SessLoggedIn]);
		unset($_SESSION[$SessUser]);
		unset($_SESSION[$SessSignInTime]);
		unset($_SESSION[$SessIP]);
		session_destroy();
	}

?>