if ($db_password == $password) {
	// Password is correct!
	// Get the user-agent string of the user.
	$user_browser = $_SERVER['HTTP_USER_AGENT'];
	// XSS protection as we might print this value
	$user_id = preg_replace("/[^0-9]+/", "", $user_id);
	$_SESSION['user_id'] = $user_id;
	// XSS protection as we might print this value
	$username = preg_replace("/[^a-zA-Z0-9_\-]+/", "", $username);
	$_SESSION['username'] = $username;
	// XSS protection as we might print this value
	$acc_type = preg_replace("/[^a-zA-Z0-9_\-]+/", "", $acc_type);
	$_SESSION['acc_type'] = $acc_type;
	$_SESSION['pwd_changed'] = $pwd_changed;
	$_SESSION['login_string'] = hash('sha512',
			  $password . $user_browser);
	// Login successful.
	$last_ip = get_ip_address();
	$mysqli->query("UPDATE members SET last_ip='{$last_ip}' WHERE id='{$user_id}'");
	return true;
}

function sec_session_start() {
    $session_name = 'sec_session_id';   // Set a custom session name
    $secure = SECURE;
    // This stops javascript being able to access the session id.
    $httponly = true;
    // Forces sessions to only use cookies.
    if (ini_set('session.use_only_cookies', 1) === FALSE) {
        header("Location: /error?err=No se pudo iniciar una sesión segura (ini_set)");
        exit();
    }
    // Gets current cookies params.
    $cookieParams = session_get_cookie_params();
    session_set_cookie_params($cookieParams["lifetime"],
        $cookieParams["path"],
        $cookieParams["domain"],
        $secure,
        $httponly);
    // Sets the session name to the one set above.
    session_name($session_name);
    session_start();            // Start the PHP session
    session_regenerate_id();    // regenerated the session, delete the old one.
}

// Unset all session values 
$_SESSION = array();
 
// get session parameters 
$params = session_get_cookie_params();
 
// Delete the actual cookie. 
setcookie(session_name(),
		'', time() - 42000, 
		$params["path"], 
		$params["domain"], 
		$params["secure"], 
		$params["httponly"]);
 
// Destroy session 
session_destroy();
header('Location: /home');