function userLogin($username, $password) {
        $clnUsername = $this->escapeForDb($username);
        $loginSQL = "SELECT id, full_name, username, salt, password, usergroup, show_offline_buddies FROM mia_users WHERE username={$clnUsername}";
        $user = $this->executeSQL($loginSQL);
        if (empty($user)) {
            return false;
        } else {    
            $dbSalt = $user->fields[3];
            $dbPassword = $user->fields[4];
        }
        
        //Try to recreate password for matching
        $inputHashedPassword = sha1($password . $dbSalt);
        //Test db password against the one entered on the form
        if ($inputHashedPassword !== $dbPassword) {
            return false;
        } else {
            //We have a match, now update/rerandomize the salt and password for added security
            $newPasswordArray = $this->buildPassword($password);
            $newSalt = $this->escapeForDb($newPasswordArray['salt']);
            $newPasswordHash = $this->escapeForDb($newPasswordArray['password']);
            $now = $this->escapeForDb(date("Y-m-d H:i:s"));
            $updateSQL = "UPDATE mia_users
                            SET password = {$newPasswordHash},
                            salt = {$newSalt},
                            heartbeat = {$now},
                            status = 'online',
                            password_reset_key = ''
                            WHERE username={$clnUsername}";
            if ($this->executeSQL($updateSQL)===false) {
                return false;
            }
        }
        $userid = $user->fields[0];
        $fullname = $user->fields[1];
        $username = $user->fields[2];
        $usergroup = $user->fields[5];
        $showoffline = $user->fields[6];
        $env = sha1($_SERVER['HTTP_USER_AGENT'].$_SERVER['REMOTE_ADDR']);
        $this->setupSession($userid, $fullname, $username, $usergroup, $env, $showoffline);
    }
    
    /**
    * Creates a new account
    * @param fullname
    * @param username
    * @param email
    * @param password
    */
    function createUserAccount($fullname, $username, $email, $password, $timeoffset) {
        $clnFullname = $this->escapeForDb($fullname);
        $clnUsername = $this->escapeForDb($username);
        $clnEmail = $this->escapeForDb($email);
        
        $passwordArray = $this->buildPassword($password);
        $clnSalt = $this->escapeForDb($passwordArray['salt']);
        $clnPasswordHash = $this->escapeForDb($passwordArray['password']);
        $now = $this->escapeForDb(date("Y-m-d H:i:s"));
        
        $userSQL = "INSERT INTO mia_users (full_name, username, password, salt, email, usergroup, time_offset, create_date)
             VALUES ({$clnFullname}, {$clnUsername}, {$clnPasswordHash}, {$clnSalt}, {$clnEmail}, 1, {$timeoffset}, {$now})";
        $result = $this->executeSQL($userSQL);
        if (!$result) {
            return false;
        }
    }