<?php
	/*
	** File: getUserID
	** Description: Get ID of user based on login/password
	** If the passwords don't match, then zero is returned
	** Version: $Revision: 1.1 $
	** Created: 08/10/99
	** Author: Leon Atkinson
	** Email: leon@clearink.com
	** CVS Author: $Author: vicky $
	** Last Revised: $Date: 1999/09/21 16:07:50 $
	**
	**
	** Copyright (c) 1999 Working Dogs.  All rights reserved.
	*/

	function getUserID($login, $password, $UseMD5=FALSE)
	{
		global $DatabaseLink;

		$Query = "select ID, Password ";
		$Query .= "FROM user ";
		$Query .= "where Login='$login'";
		$DatabaseResult = mysql_query($Query, $DatabaseLink);
		if(mysql_numrows($DatabaseResult) > 0)
		{
			list($tUser, $tPassword)  = mysql_fetch_row($DatabaseResult);

			if($UseMD5)
			{
				$tPassword = md5($tPassword);
			}

			//compare supplied password and password from database
			if($tPassword == $password)
			{
				/*
				** Make sure user is allowed to login
				*/
				$Query = "SELECT count(*) ";
				$Query .= "FROM user_permission up, permission p ";
				$Query .= "WHERE up.User=$tUser ";
				$Query .= "AND up.Permission = p.ID ";
				$Query .= "AND p.Name = 'Login' ";
	
				$DatabaseResult = mysql_query($Query, $DatabaseLink);
				list($has_permission) = mysql_fetch_row($DatabaseResult);

				if($has_permission > 0)
				{
					$oUser = $tUser;
				}
				else
				{
					//user doesn't have permission to login
					$oUser = 0;
				}

			}
			else
			{
				//passwords don't match
				$oUser = 0;
			}
		}

		return(intval($oUser));
	}

?>