include("../inc/i_conect.php");
include("../inc/i_comunes.php");
include("inc/tbl_user.php");
include("../inc/meta_scripts.html");
//-- File Name : login.php
//-- Description : página que limita el acceso al panel admisnistrador
//-- Programmer : Christian Díaz
//-- Date : 01/May/2006
//------
$vlString = "";
$vlLogin = trim( $_POST["txtUsuario"] );
$vlClave = trim( $_POST["txtClave"] );
$vlLogin = fm_ecs( $vlLogin );
$vlClave = fm_ecs( $vlClave );
//echo "vlLogin: " . $vlLogin . "
" ;
//echo "vlClave: " . $vlClave . "
" ;
//exit();
//------
if (!empty($vlLogin))
{
$vlString = "Debe ingresar un usuario";
}
if (!empty($vlString))
{
if (!empty($vlClave))
{
$vlString = "Debe ingresar una contrase�a";
}
}
//------
if (!(empty($vlLogin) && empty($vlClave)))
{
$vlResult = fm_bus_user("", $vlLogin, $vlClave, "", "", "", "", "");
$vlReturn = mysql_num_rows($vlResult);
if (!empty($vlReturn))
{
$vlObjrst = mysql_fetch_array($vlResult);
if (trim( $vlObjrst["user_login"]) == trim($vlLogin))
{
if (trim( $vlObjrst["user_pass"]) == trim($vlClave))
{
//------------------------------------------------
$_SESSION["vgCodUser"] = trim($vlObjrst["user_cod"]) ;
$_SESSION["vgNombre"] = trim($vlObjrst["user_nomb"]) ;
$_SESSION["vgCedula"] = trim($vlObjrst["user_cedula"]) ;
$_SESSION["vgLogin"] = trim($vlObjrst["user_login"]) ;
$_SESSION["vgCodNiv"] = trim($vlObjrst["user_niv_cod"]) ;
$_SESSION["vgCodAS"] = trim($vlObjrst["user_cod_as"]) ;
//------------------------------------------------
if ( $_SESSION["vgCodNiv"] == 1 ){
$_SESSION["vgMostrarAdmin"] = true;
$_SESSION["vgMostrarDir"] = false;
$_SESSION["vgMostrarProm"] = false;
}else if ($_SESSION["vgCodNiv"] == 3 ){
$_SESSION["vgMostrarDir"] = true;
$_SESSION["vgMostrarAdmin"] = false;
$_SESSION["vgMostrarProm"] = false;
}else if ( ($_SESSION["vgCodNiv"] == 2) || ($_SESSION["vgCodNiv"] == 4) ){
$_SESSION["vgMostrarProm"] = true;
$_SESSION["vgMostrarAdmin"] = false;
$_SESSION["vgMostrarDir"] = false;
}
//------------------------------------------------
mysql_free_result($vlResult );
//----------------
echo "";
//----------------
}else{
$vlString = "La Contrase�a ingresada es errada." ;
}
}else{
$vlString = "El Usuario ingresado no existe." ;
}
}else{
$vlString = "El Usuario ingresado no existe." ;
}
}
if($vlString != "")
{
fm_alerta($vlString);
fm_redirect("inc/i_desconect.php");
}
//******************************************************************************************
?>