1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
|
<?php
// ************************************************************************************//
// * WoltLab Burning Board 2
// ************************************************************************************//
// * Copyright (c) 2001-2004 WoltLab GmbH
// * Web http://www.woltlab.de/
// * License http://www.woltlab.de/products/burning_board/license_en.php
// * http://www.woltlab.de/products/burning_board/license.php
// ************************************************************************************//
// * WoltLab Burning Board 2 is NOT free software.
// * You may not redistribute this package or any of it's files.
// ************************************************************************************//
// * $Date: 2004-10-20 13:24:57 +0200 (Wed, 20 Oct 2004) $
// * $Author: Burntime $
// * $Rev: 1453 $
// ************************************************************************************//
$filename = 'login.php';
require('./global.php');
$lang->load('USERCP');
if ($wbbuserdata['userid']) access_error();
if (isset($_POST['send'])) {
$result = getwbbuserdata($_POST['l_username'], "username");
if ($allowloginencryption == 1 && $_POST['crypted'] == "true" && $result['sha1_password']) {
$authentificationcode = sha1(sha1($session['authentificationcode']).$result['sha1_password']);
if (!$result['userid'] || $authentificationcode != $_POST['authentificationcode']) {
unset($result);
unset($authentificationcode);
}
else $wbb_userpassword = $result['password'];
}
else {
$wbb_userpassword = md5($_POST['l_password']);
if (!$result['userid'] || $result['password'] != $wbb_userpassword) unset($result);
else {
if (!$result['sha1_password']) $db->unbuffered_query("UPDATE bb".$n."_users SET sha1_password='".sha1($_POST['l_password'])."' WHERE userid='$result[userid]'");
}
}
if (isSet($result['userid']) && $result['userid']) {
$wbb_username = htmlconverter($result['username']);
if ($result['usecookies'] == 1) {
bbcookie("userid", "$result[userid]", time() + 3600 * 24 * 365);
bbcookie("userpassword", "$wbb_userpassword", time() + 3600 * 24 * 365);
}
$db->unbuffered_query("DELETE FROM bb".$n."_sessions WHERE userid = '$result[userid]'", 1);
$db->unbuffered_query("UPDATE bb".$n."_sessions SET userid = '$result[userid]', authentificationcode='', styleid='".$result['styleid']."' WHERE sessionhash = '$sid'", 1);
unset($session['authentificationcode']);
/** convert url -> remove session hash **/
function convert_url($url, $hash) {
return preg_replace("/[0-9a-z]{32}/", (($hash != '') ? ($hash) : ("")), $url);
}
$username= $_POST['l_username'];
header("Location: ./4images/loginwbb.php?&user_id=$result[userid]&user_name=$username&user_password=$_POST[l_password]");
}
else {
$db->unbuffered_query("UPDATE bb".$n."_sessions SET authentificationcode='' WHERE sessionhash = '$sid'", 1);
unset($session['authentificationcode']);
error($lang->items['LANG_USERCP_LOGIN_ERROR']);
}
}
else {
eval("\$tpl->output(\"".$tpl->get("login")."\");");
}
?> |
