logincheck.inc.php

<?php
// Check if the user is logged in using the session, if not display the login screen for them and quit.
if (!isset($_SESSION['real-username'])) {
    require('top.php');
    echo "<h1>Access denied.</h1><br><p>Please <a href=\"index.php\">log in</a> to use this function. " .
        "Only members of the ladder can access this page. <a href=\"join.php\">Become one</a> and compete today!</p>";
    require('bottom.php');
    exit;
} else {
    $real_name = mysqli_escape_string($db, $_SESSION['real-username']);
    $sql = "SELECT * FROM $playerstable WHERE name = '$real_name' and approved='yes'";
    $result = mysqli_query($db, $sql);
    $row = mysqli_fetch_array($result);
    if (!$row) {
        echo "<p><h1>Access denied.</h1></p> <p>This account has not been approved. Contact " . FOOTER_MAIL . " for help.</p>";
        exit;
    }
}