// JavaScript Document
function GetXmlHttpObject()
{
var xmlHttp=null;
try
  {
  // Firefox, Opera 8.0+, Safari
  xmlHttp=new XMLHttpRequest();
  }
catch (e)
  {
  // Internet Explorer
  try
    {
    xmlHttp=new ActiveXObject("Msxml2.XMLHTTP");
    }
  catch (e)
    {
    xmlHttp=new ActiveXObject("Microsoft.XMLHTTP");
    }
  }
return xmlHttp;
}

function check_code() {
frm = document.form;
frm.security_code.style.background = "white";
xmlHttp=GetXmlHttpObject();
document.getElementById("code_result").innerHTML = ""; 
var url="functions/check_code.php";
var to_send = "code="+frm.security_code.value;
xmlHttp.onreadystatechange=stateChanged;
xmlHttp.open("POST",url,true);
xmlHttp.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
xmlHttp.send(to_send);
}
function stateChanged() {
//window.cs = "ok";
document.getElementById("code_result").innerHTML = "";
if (xmlHttp.readyState==4 && xmlHttp.status == 200) var returned_text = xmlHttp.responseText;
if (xmlHttp.readyState==3) document.getElementById("code_result").innerHTML = "Checking...";
if (returned_text == 'ok') { document.getElementById("code_result").innerHTML = 'Correct!'; 
frm.code_value.value = "ok";
//frm.security_code.blur();
//window.cs = "ok";
}
if (returned_text == 'wrong') { 
document.getElementById("code_result").innerHTML = 'WRONG code!';
frm.security_code.style.background = "yellow";
frm.code_value.value = "wrong";
/*ermes += "- Wrong security code\n"; 
err = "yes";
window.cs = "wrong";*/
}
}