--- Revision 353839396430
+++ Revision 623233666531
@@ -128,3 +128,50 @@
 
 endif; // $INCLUDED_SIGN_IN_PHP
 ?>
+
+
+------- authentication page ---
+<?php
+
+$pathToRoot=dirname($_SERVER['SCRIPT_FILENAME'])."/";
+include($pathToRoot."includes/phpheader.php");
+include($pathToRoot."includes/httpheader.php");
+include($pathToRoot."includes/database.php");
+
+  // Clean the data collected from the user
+  $appUsername = 
+    EscapeShellCmd(substr($HTTP_POST_VARS["formUsername"], 0, 25));
+  $appPassword = 
+    EscapeShellCmd(substr($HTTP_POST_VARS["formPassword"], 0, 25));
+
+  $authenticated = authenticateDatabaseUser($appUsername, $appPassword);
+  if ($authenticated) 
+  {
+    // Register the username
+    $_SESSION["authenticatedUser"] = $appUsername;
+
+    // Register access priviledges
+    if (!empty($accessPriviledges))
+        $_SESSION["accessPrivs"] = implode(",", $accessPriviledges);
+	
+	  $newURL = "";
+	  
+      // Deduce the URL to go to after authentication. If we aren't told,
+      // just go to the main page
+      if (array_key_exists('fromURL', $queryVars))
+        $newURL = $queryVars['fromURL'];
+      else
+        $newURL = $URLToRoot;
+
+	  // Relocate back to the desired page
+	  header("Location: ".$newURL);      
+  }
+  else
+  {
+    // The authentication failed
+    $_SESSION["sessionMessage"] = "Could not sign in as \"$appUsername\".<br />Please check the username and password and try again.";
+
+	  // Relocate back to the sign-in page
+	  header("Location: ".$URLToRoot."signin.php");      
+  }
+?>