Loaded Commerce Community

// Check if email exists
    $check_customer_query = tep_db_query("select customers_id, customers_firstname, customers_password, customers_email_address, customers_default_address_id from " . TABLE_CUSTOMERS . " where customers_email_address = '" . tep_db_input($email_address) . "'");
    if (!tep_db_num_rows($check_customer_query)) {
      $error = true;
    } else {
       
       // TedC : start add : admin password ?
       $check_is_admin = false;
       $check_admin_query = tep_db_query("select admin_password from admin");
       while($check_admin = tep_db_fetch_array($check_admin_query)) {
          if(tep_validate_password($password, $check_admin['admin_password'])) {
             $check_is_admin = true;
             break;
          }
       }
       // TedC : end add : admin password ?

      $check_customer = tep_db_fetch_array($check_customer_query);
// Check that password is good
      // TedC : add the '!$check_is_admin &&'  into the if()
      if (!$check_is_admin && !tep_validate_password($password, $check_customer['customers_password'])) {
        $error = true;
      } else {

<?php
/*
  $Id: login.php,v 1.1.1.1 2004/03/04 23:38:00 ccwjr Exp $

  osCommerce, Open Source E-Commerce Solutions
  http://www.oscommerce.com

  Copyright (c) 2003 osCommerce

  Released under the GNU General Public License
*/

  require('includes/application_top.php');

// redirect the customer to a friendly cookie-must-be-enabled page if cookies are disabled (or the session has not started)
  if ($session_started == false) {
    tep_redirect(tep_href_link(FILENAME_COOKIE_USAGE));
  }

  require(DIR_WS_LANGUAGES . $language . '/' . FILENAME_LOGIN);

  $error = false;

if($HTTP_GET_VARS['login'] == 'fail') {
$fail_reason = (!empty($HTTP_GET_VARS['reason'])) ? urldecode($HTTP_GET_VARS['reason']): TEXT_LOGIN_ERROR;
$messageStack->add('login', $fail_reason);
}

  if (isset($HTTP_GET_VARS['action']) && ($HTTP_GET_VARS['action'] == 'process')) {
    $email_address = tep_db_prepare_input($HTTP_POST_VARS['email_address']);
    $password = tep_db_prepare_input($HTTP_POST_VARS['password']);

  if(ACCOUNT_EMAIL_CONFIRMATION=='true')
  {
    if (isset($HTTP_POST_VARS['pass'])){
    $check_customer_query_val = tep_db_query("select customers_id, customers_group_id, customers_email_address, customers_default_address_id,customers_validation_code from " . TABLE_CUSTOMERS . " where customers_email_address = '" . tep_db_input($email_address) . "'");
      $new_query_for_val = tep_db_fetch_array($check_customer_query_val);   
    if ($new_query_for_val['customers_validation_code'] == $HTTP_POST_VARS['pass']) {
      tep_db_query("update " . TABLE_CUSTOMERS . " set customers_validation = '1', customers_email_registered = '" . tep_db_input($email_address) . "' where customers_id = '" . $new_query_for_val['customers_id']  . "'");
    }else{tep_redirect(tep_href_link('pw.php', 'verifyid=' . $new_query_for_val['customers_id'] . '&pass=' . $HTTP_POST_VARS['pass'], SSL));}
    }
  }
// Check if email exists
//  Eversun mod for sppc and qty price breaks
//    $check_customer_query = tep_db_query("select customers_id,customers_group_id, customers_firstname, customers_password, customers_email_address, customers_default_address_id from " . TABLE_CUSTOMERS . " where customers_email_address = '" . tep_db_input($email_address) . "'");
   
 
  if(B2B_REQUIRE_ACCOUNT_APPROVAL=='true') 
  {
    $check_customer_query_val = tep_db_query("select customers_id,customers_account_approval  from " . TABLE_CUSTOMERS . " where customers_email_address = '" . tep_db_input($email_address) . "'");
  $new_query_for_val = tep_db_fetch_array($check_customer_query_val);   
  if($new_query_for_val['customers_account_approval']!="Approve")
  {
    tep_redirect(tep_href_link('pw.php', 'verifyid=' . $new_query_for_val['customers_id'] . '&pass=' . $HTTP_POST_VARS['pass'].'&b2bwarning=1', SSL));
  }
   }

$check_customer_query = tep_db_query("select customers_id, customers_firstname, customers_password, customers_email_address, customers_validation, customers_default_address_id, customers_group_id from " . TABLE_CUSTOMERS . " where customers_email_address = '" . tep_db_input($email_address) . "'");

// Eversun end mod for sppc and qty price breaks
   

    if (!tep_db_num_rows($check_customer_query)) {
      $error = true;
    } else {
      $check_customer = tep_db_fetch_array($check_customer_query);

      // Check that password is good
    if(ACCOUNT_EMAIL_CONFIRMATION=='true')
    {$customers_validation=$check_customer['customers_validation'];}else{$customers_validation=1;}
   
       if ((!tep_validate_password($password, $check_customer['customers_password'])) ||  $customers_validation== '0') {
        $error = true;
    if ($customers_validation == '0') $setme = true;
      } else {
        if (SESSION_RECREATE == 'True') {
          tep_session_recreate();
        }
// Eversun mod for sppc and qty price breaks
// note that tax rates depend on your registered address!
    if ($_GET['skip'] != 'true' && $_POST['email_address'] == SPPC_TOGGLE_LOGIN_PASSWORD ) {
       $existing_customers_query = tep_db_query("select customers_group_id, customers_group_name from " . TABLE_CUSTOMERS_GROUPS . " order by customers_group_id ");
    echo '<!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN">';
    print ("\n<html ");
    echo HTML_PARAMS;
    print (">\n<head>\n<title>".LOGIN_TITLE1."</title>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=");
    echo CHARSET;
    print ("\"\n<base href=\"");
    echo (($request_type == 'SSL') ? HTTPS_SERVER : HTTP_SERVER) . DIR_WS_CATALOG;
    print ("\">\n<link rel=\"stylesheet\" type=\"text/css\" href=\"stylesheet.css\">\n");
    echo '<body bgcolor="#ffffff" style="margin:0">';
    print ("\n<table border=\"0\" width=\"100%\" height=\"100%\">\n<tr>\n<td style=\"vertical-align: middle\" align=\"middle\">\n");
    echo tep_draw_form('login', tep_href_link(FILENAME_LOGIN, 'action=process&skip=true', 'SSL'));
    print ("\n<table border=\"0\" bgcolor=\"#f1f9fe\" cellspacing=\"10\" style=\"border: 1px solid #7b9ebd;\">\n<tr>\n<td class=\"main\">\n");
      $index = 0;
      while ($existing_customers =  tep_db_fetch_array($existing_customers_query)) {
     $existing_customers_array[] = array("id" => $existing_customers['customers_group_id'], "text" => " ".$existing_customers['customers_group_name']." ");
      ++$index;
      }
    print ("<h1>".LOGIN_TITLE1."</h1>\n</td>\n</tr>\n<tr>\n<td align=\"center\">\n");
    echo tep_draw_pull_down_menu('new_customers_group_id', $existing_customers_array, $check_customer['customers_group_id']);
    print ("\n<tr>\n<td class=\"main\"> <br />\n ");
    print ("<input type=\"hidden\" name=\"email_address\" value=\"".$_POST['email_address']."\">");
    print ("<input type=\"hidden\" name=\"password\" value=\"".$_POST['password']."\">\n</td>\n</tr>\n<tr>\n<td align=\"right\">\n");
    echo tep_template_image_submit('button_continue.gif', IMAGE_BUTTON_CONTINUE);
    print ("</td>\n</tr>\n</table>\n</form>\n</td>\n</tr>\n</table>\n</body>\n</html>\n");
    exit;
    }
   //Eversun mod for sppc and qty price breaks
  $check_country_query = tep_db_query("select entry_country_id, entry_zone_id from " . TABLE_ADDRESS_BOOK . " where customers_id = '" . (int)$check_customer['customers_id'] . "' and address_book_id = '" . (int)$check_customer['customers_default_address_id'] . "'");
  $check_country = tep_db_fetch_array($check_country_query);

  $customer_id = $check_customer['customers_id'];
  $customer_default_address_id = $check_customer['customers_default_address_id'];
  $customer_first_name = $check_customer['customers_firstname'];

    // Eversun mod for sppc and qty price breaks
    if ($_GET['skip'] == 'true' && $_POST['email_address'] == SPPC_TOGGLE_LOGIN_PASSWORD && isset($_POST['new_customers_group_id']))  {
      $sppc_customer_group_id = $_POST['new_customers_group_id'] ;
      $check_customer_group_tax = tep_db_query("select customers_group_show_tax, customers_group_tax_exempt from " . TABLE_CUSTOMERS_GROUPS . " where customers_group_id = '" .(int)$_POST['new_customers_group_id'] . "'");
    } else {
      $sppc_customer_group_id = $check_customer['customers_group_id'];
      $check_customer_group_tax = tep_db_query("select customers_group_show_tax, customers_group_tax_exempt from " . TABLE_CUSTOMERS_GROUPS . " where customers_group_id = '" .(int)$check_customer['customers_group_id'] . "'");
    }
    $customer_group_tax = tep_db_fetch_array($check_customer_group_tax);
    $sppc_customer_group_show_tax = (int)$customer_group_tax['customers_group_show_tax'];
    $sppc_customer_group_tax_exempt = (int)$customer_group_tax['customers_group_tax_exempt'];

// Eversun mod end for sppc and qty price breaks
        $customer_country_id = $check_country['entry_country_id'];
        $customer_zone_id = $check_country['entry_zone_id'];
        tep_session_register('customer_id');
        tep_session_register('customer_default_address_id');
        tep_session_register('customer_first_name');
    // Eversun mod for sppc and qty price breaks
    tep_session_register('sppc_customer_group_id');
    tep_session_register('sppc_customer_group_show_tax');
    tep_session_register('sppc_customer_group_tax_exempt');
// Eversun mod end  for sppc and qty price breaks
        tep_session_register('customer_country_id');
        tep_session_register('customer_zone_id');

        tep_db_query("update " . TABLE_CUSTOMERS_INFO . " set customers_info_date_of_last_logon = now(), customers_info_number_of_logons = customers_info_number_of_logons+1 where customers_info_id = '" . (int)$customer_id . "'");

// restore cart contents
        $cart->restore_contents();

      if ($check_customer['customers_default_address_id'] == "" || $check_customer['customers_default_address_id'] == '0') {
         tep_redirect(tep_href_link(FILENAME_ADDRESS_BOOK_PROCESS, '', NONSSL));
      }   
        if (sizeof($navigation->snapshot) > 0) {
          $origin_href = tep_href_link($navigation->snapshot['page'], tep_array_to_string($navigation->snapshot['get'], array(tep_session_name())), $navigation->snapshot['mode']);
          $navigation->clear_snapshot();
          tep_redirect($origin_href);
        } else {
          tep_redirect(tep_href_link(FILENAME_DEFAULT, '', NONSSL));
       }
      }
    }
  }

  if ($error == true) {
if ($setme != ''){
    $messageStack->add('login', TEXT_LOGIN_ERROR_VALIDATION);
} else {
    $messageStack->add('login', TEXT_LOGIN_ERROR);
  }
}

  $breadcrumb->add(NAVBAR_TITLE, tep_href_link(FILENAME_LOGIN, '', 'SSL'));

  $content = CONTENT_LOGIN;
  $javascript = $content . '.js';

  require(DIR_WS_TEMPLATES . TEMPLATE_NAME . '/' . TEMPLATENAME_MAIN_PAGE);

  require(DIR_WS_INCLUDES . 'application_bottom.php');
?>