Forum Moderators: coopster
the relevant file is:
<?
//get member data
if (!$remember) $en['pass'] = md5($en['pass']);
echo $remember;
$result = sql_query("SELECT * FROM $membtable WHERE m_user='{$en['user']}' AND m_pass='".$en['pass']."' AND m_confirmed>0");
$line = sql_fetch_assoc($result);
//store remember-me cookie
if ($remember && sql_num_rows($result) == 0) {
setcookie('remember','',time() - 360000,constant('dir'));
}
//require image for login?
if (require_image_login == 'Yes') {
$c = sql_fetch_assoc(sql_query("SELECT COUNT(*) AS cnt FROM $picstable WHERE i_status=2 AND i_user='$line[m_id]'"));
$images = $c['cnt'];
}
else {
$images = 1;
}
if (sql_num_rows($result) == 0) {
//unsuccessful login
$en['login_message'] = '<font color=red><b>'._login_failed.'</font></b><br>';
load_template(tpl_path.'login.tpl');
}
if (sql_num_rows($result) > 0) {
if ($images == 0) {
//no image approved
$en['login_message'] = '<font color=red><b>'._login_need_pic.'</font></b><br>';
load_template(tpl_path.'login.tpl');
}
else {
//login successful, setting up session
ob_clean();
session_start();
$time_started = md5(mktime());
$secure_session_user = md5($line['m_user'].$line['m_pass']);
$_SESSION['userid'] = $line['m_id'];
$_SESSION['user'] = $line['m_user'];
$_SESSION['pass'] = md5($en['pass']);
$_SESSION['username'] = $line['m_user'];
$_SESSION['session_key'] = $time_started.$secure_session_user.session_id();
$_SESSION['current_session'] = $line['m_user']."=".$_SESSION['session_key'];
//"remember me" cookie
if ($en['remember'] == 'ON') {
$rem = base64_encode(serialize(array('user' => $line['m_user'], 'pass' => $line['m_pass'])));
setcookie('remember',$rem,time()+(86400*30),constant('dir'));
}
//if (strpos($en['redirect'],'index.php?req=login')) unset($en['redirect']);
$redirect = constant('dir').'members.html');
sql_query("INSERT INTO $logstable VALUES($line[m_id],".time().",'$ip')");
fire_event('member_login',$line['m_id']);
header('Location: '.$redirect);
exit;
}
}
?>
[edited by: jatar_k at 4:14 pm (utc) on Feb. 10, 2006]
[edit reason] no urls thanks [/edit]
the first thing i noticed was that you dont need the
}
} at the bottom of the program they dont match up to anything