// Cross-browser XMLHttpRequest instantiation.
if (typeof XMLHttpRequest == 'undefined') {
	XMLHttpRequest = function () {
		var msxmls = ['MSXML3', 'MSXML2', 'Microsoft']
		for (var i=0; i < msxmls.length; i++) {
			try {
				req = new ActiveXObject(msxmls[i]+'.XMLHTTP')
				if (req) {
					return req
				}
			} catch (e) { }
		}
		throw alert("No XML component installed!")
	}
}

function trylogin()
{
		username = document.forms[0].elements['USERNAME'].value;
		password = document.forms[0].elements['PASSWORD'].value;
		if(!username) {alert('Please enter your USERNAME');document.forms[0].elements['USERNAME'].focus();return false;}
		if(!password) {alert('Please enter your PASSWORD');document.forms[0].elements['PASSWORD'].focus();return false;}
		req_flow = new XMLHttpRequest();
		req_flow.open("GET", '/cgi-bin/page_cmm'+'?USERNAME=99999999'+Math.random(), true, username, password);
		req_flow.onreadystatechange = function(){
				// alert('Ready state: '+req_flow.readyState);
				
				if(req_flow.readyState == 4) {
					// alert('Status: '+req_flow.status);
					// alert('Response: '+req_flow.responseText);
					if(req_flow.status == 200) {
					// login corretto, occorre analizzare se la password  per˜ scaduta
					
					server_response = req_flow.responseText.toUpperCase();
					
					isExpired = ( server_response.indexOf('UTENTI.USERID')!=-1 );
					if(isExpired){
						continue_login = confirm('Your account seems expired. If you click OK the server will force you to change the password to continue');
						if(continue_login){window.location.href = '/'+'?USERNAME='+username+'&SESSION='+Math.random();}
						}
						else{window.location.href = '/'+'?USERNAME='+username+'&SESSION='+Math.random();}
					}
					else{alert('Authorization failed.\nPlease retry')}
			}
		}
		req_flow.send(null);
}

function logout()
{
		// questa funzione effettua un logout, cio
		// il reset volutamente errato della coppia (username, password), in modo che il server risponda nuovamente con la pagina 401
		// il redirect sulla pagina di login
		req_flow = new XMLHttpRequest();
		req_flow.open("GET", '/cgi-bin/page_cmm'+'?USERNAME=99999999'+Math.random(), true, '****************','********');
		req_flow.onreadystatechange = function(){
				 
				// alert(req_flow.readyState);
				// alert(req_flow.status);
				// alert(req_flow.responseText);
				if(req_flow.readyState == 4) {
					req_flow2 = new XMLHttpRequest();
					req_flow2.open("GET", '/cgi-bin/page_cmm'+'?USERNAME=99999999'+Math.random(), true, '','');
					req_flow2.send(null);
					window.location.href = 'index.htm'+'?SESSIONE='+Math.random()
					
			}
		}
		req_flow.send(null);
}
