<?
$sessionType = "admin";
require "mconfig.inc.php";
require "msite.inc.php";

stSetupCacheControl();

$target = stGetRequestItem("goto", FALSE);
if (!stCheckHTTPS() || $target === FALSE || $target == "" || strpos($target, "login.php") !== FALSE)
  exit;

$password = stGetSetting("admPassword");
if (stGetRequestItem("admpass", FALSE) == $password)
{
  if (!stSessionStart($password, "admTimeout"))
    error_log("Admin session AUTH LOGIN failed (session setup)");
}
else
{
  error_log("Admin session AUTH LOGIN failed (password)");
}

header("Location: ".$target);
?>