Coder Forum

PHP Quellcode

<?php
	if (!defined('wBB')) define('wBB', '/var/www/board/');
	require_once (wBB.'global.php');
	if (!isset($_COOKIE['wcf_userID']))
	{
		if (isset($_POST['nick']))
			$username = secure($_POST['nick']);
		if (isset($_POST['pass']))
			$password = $_POST['pass'];
		$time = microtime();
		if (isset($username) && isset($password))
		{
			if (UserUtil::isValidUsername($username) == 1)
			{
				if (UserUtil::isAvailableUsername($username) != 1)
				{
					$inhalt .= '<h1>Login</h1><center>';
					mysql_select_db("board", $sql);
					$res = mysql_query("SELECT `userID` FROM `wcf1_user` WHERE `username`='$username'", $sql) or die(mysql_error());
					$row = mysql_fetch_object($res);
					$user = new User($row->userID);
					if ($user->checkPassword($password) == 1)
					{
						HeaderUtil::setCookie("userID", $user->userID, TIME_NOW + 365 * 24 * 3600);
						HeaderUtil::setCookie("password", StringUtil::getSaltedHash($password, $user->salt), TIME_NOW + 365 * 24 * 3600);
						$nick = $user->username;
						$uid = $user->userID;
						$inhalt .= 'Thank you for logging in, '.$nick.'.<br>';
						if (isset($_COOKIE['wcf_cookieHash']))
						{
							$session = $_COOKIE['wcf_cookieHash'];
							mysql_query("UPDATE `wcf1_session` SET `userID`='$uid', `username`='$nick' WHERE `sessionID`='$session'") or die(mysql_error());
						}
						$referer = "/";
					}
					else
					{
						$inhalt .= 'You\'ve entered a wrong password!<br>';
					}
					mysql_select_db($db_name, $sql);
				}
				else
				{
					$inhalt .= 'That Username isn\'t registered!<br>';
				}
			}
			else
			{
				$inhalt .= 'You\'ve entered an invalid Username!<br>';
			}
		}
?>