<?php

	if(isset($_REQUEST['signin'])) {

	$email = mysql_real_escape_string($_POST['email']);
	$password = sha1(mysql_real_escape_string($_POST['password']));

	$query = mysql_query("SELECT
							  id,
							  email,
							  password,
							  level
						  FROM
							  members
						  WHERE
							  email = '" . $email . "'
						  AND
							  password = '" . $password . "'
						  AND
							  level = '1'
                          LIMIT
                              1") OR die(mysql_error());

	$total = mysql_num_rows($query);

	if($total > 0) {

    session_regenerate_id();

	$_SESSION['admin'] = 'admin';
	header("Location: index.php");

		}else{
		$error = '<p class="red_span" align="center">' . $lang['false_login_admin'] . '!</p>';
		}
	}

?>