# User is trying to login, check username/password and return info.
elsif ($in{'login'}) {
my $userid_q = $DBH->quote($in{'userid'});
$query = qq!
SELECT password, per_view, per_add, per_del, per_mod, per_admin FROM $db_table_user
WHERE username = $userid_q
!;
$sth = $DBH->prepare ($query) or &cgierr("Unable to query database. Reason: " . $DBH->errstr . ". Query: $query");
$sth->execute or &cgierr("Unable to query database. Reason: " . $sth->errstr . ". Query: $query");

if ($sth->rows) {

($orig_password, @perms) = $sth->fetchrow_array;
$orig_password =~ s/^\s*(\S*)\s*$/$1/;
$crypt_pass = crypt ($in{'pw'}, $orig_password);

# Create session id and insert it into session table.
if ($orig_password eq $crypt_pass) {
srand;
my $rand = int(rand(100000));
$session_id = "$in{'userid'}.$rand";
my $session_id_q = $DBH->quote ($session_id);

my $time = time();
$query = qq!
INSERT INTO $db_table_session (session_id, create_time)
VALUES ($session_id_q, $time)
!;
$DBH->do($query) or &cgierr("Unable to insert session id. Reason: " . $DBH->errstr . ". Query: $query");
}

}
else {
return "invalid username/password";
}