var introPage = "http://pwc-prd.pwc.com/cz/en/alumni/index.jhtml"; // url for page after logout
var secretPage = "http://pwc-prd.pwc.com/cz/en/alumni/discounts-and-benefits.jhtml"; // url for first secured page
var siteName = "pwcAlumni"; // name of webasite for cookie
var logoutMsg = "You've beed logout.";
var badpwdMsg = "Wrong password or username, please try again."
var exp = new Date();
var expMin = 10; // number of minutes for expiration of cookie
var oneYearFromNow = exp.getTime() + expMin * 1000 * 60; 
var md5_password = "91e02cd2b8621d0c05197f645668c5c4"; // md5 hash of password, see http://pajhome.org.uk/crypt/md5/
var login_password = "2a4c0da1b72555e87e1137db7a891ed1"; // md5 hash of username, see http://pajhome.org.uk/crypt/md5/


function setCookie(name, value) {
	var newCookie = name + "=" + escape(value) 
	document.cookie = newCookie;		
}

function getCookie(name) {
	var theCookie = document.cookie;
	var prefix = name + "=";
	var begin = theCookie.indexOf("; " + prefix);
	if (begin == -1) {
		begin = theCookie.indexOf(prefix);
		if (begin != 0) return null;
	} else
	begin += 2;
	var end = document.cookie.indexOf(";", begin);
	if (end == -1)
	end = theCookie.length;
	return unescape(theCookie.substring(begin + prefix.length, end));
}
	
function deleteCookie()
{ 
    document.cookie = siteName + '=; expires=Thu, 01-Jan-70 00:00:01 GMT;';
    setCookie(siteName,"");
    alert(logoutMsg);
    window.location.href = introPage;
}

function redirect()
{

     window.location = secretPage;
}
	
function askPW() {
		//var password = prompt('Please enter your password:');
				password = document.getElementById('password').value;
				login = document.getElementById('login').value;
                if (hex_md5(password) == md5_password && (hex_md5(login) == login_password )) {
				setCookie(siteName,password);
                redirect();

		} 
                else {  
                    alert(badpwdMsg);

		}		
return true;
}


function lock()
{
	//alert(window.location);
    exp.setTime(oneYearFromNow);
	var pw = getCookie(siteName);
        
	if ((!pw) || (hex_md5(pw) != md5_password)) {
		//askPW();
		           document.location.href=introPage; 
    
				return false;            
     			
	}
	else
	{
				return true;	
	}
}