login.php

   1 <?php session_start();
   2 if (isset($_POST['userid']))
   3 {
   4         setcookie("uname", $_POST['userid'], time() + 90000000);
   5         $_COOKIE['uname'] = $_POST['userid'];
   6 }
   7 if (isset($_POST['password']))
   8 {
   9         setcookie("pword", $_POST['password'], time() + 90000000);
  10         $_COOKIE['pword'] = $_POST['password'];
  11 }
  12 include ("config.php");
  13 ?>
  14 <h3>User Login</h3>
  15
  16 <?php
  17 function getuserid($user)
  18 {
  19         $sql = "SELECT * FROM users WHERE username='$user'";
  20         $result = mysql_query($sql);
  21         $myrow = mysql_fetch_array($result);
  22         return $myrow["userid"];
  23 }
  24 function usermap($userid1, $userid2)
  25 {
  26         if ($userid1 != $userid2)
  27         {
  28                 $sql = "SELECT * FROM usermap WHERE userid1='$userid1' AND userid2='$userid2'";
  29                 $result = mysql_query($sql);
  30                 if (mysql_num_rows($result) == 0)
  31                 {
  32                         $sql = "INSERT INTO usermap (userid1,userid2) VALUES ('$userid1','$userid2')";
  33                         $result = mysql_query($sql);
  34                 }
  35         }
  36 }
  37 if (isset($_POST['submit']))
  38 {
  39         if (!$_POST['userid'])
  40         {
  41                 echo "Please enter a username.";
  42                 ?>
  43                                                 <form method=post action=login.php>
  44                                                 Username: <input type=text name=userid><br>
  45                                                 Password: <input type=password name=password><br><br>
  46                                                 <input type=submit name=submit value=Login> <input type=reset>
  47                                                 </form>
  48                                                 <?php }
  49         else
  50         {
  51                 if (!$_POST['password'])
  52                 {
  53                         echo "Please enter a password.";
  54                         ?>
  55                                                                                                 <form method=post action=login.php>
  56                                                                                                 Username: <input type=text name=userid><br>
  57                                                                                                 Password: <input type=password name=password><br><br>
  58                                                                                                 <input type=submit name=submit value=Login> <input type=reset>
  59                                                                                                 </form>
  60                                                                                                 <?php }
  61                 else
  62                 {
  63                         $username = auth();
  64                         if (!$username)
  65                         {
  66                                 echo "You failed to log in.  Please <a href=login.php>try again</a>.";
  67                         }
  68                         else
  69                         {
  70                                 $thissid = session_id();
  71                                 $sql =
  72                                         "UPDATE users SET lastsid='$thissid' WHERE username='{$_POST['userid']}'";
  73                                 $result = mysql_query($sql);
  74                                 $sql = "SELECT * FROM users WHERE lastsid='$thissid'";
  75                                 $result = mysql_query($sql);
  76                                 if (mysql_num_rows($result) >= 2)
  77                                 {
  78                                         while ($myrow = mysql_fetch_array($result))
  79                                         {
  80                                                 $useid2 = $myrow["userid"];
  81                                                 $useid = getuserid($userid);
  82                                                 usermap($useid, $useid2);
  83                                                 usermap($useid2, $useid);
  84                                         }
  85                                 }
  86                                 $lastacip = $_SERVER['REMOTE_ADDR'];
  87                                 $sql = "SELECT * FROM users WHERE lastacip='$lastacip'";
  88                                 $result = mysql_query($sql);
  89                                 if (mysql_num_rows($result) >= 2)
  90                                 {
  91                                         while ($myrow = mysql_fetch_array($result))
  92                                         {
  93                                                 $useid2 = $myrow["userid"];
  94                                                 $useid = getuserid($userid);
  95                                                 usermap($useid, $useid2);
  96                                                 usermap($useid2, $useid);
  97                                         }
  98                                 }
  99                                 echo "Logged in.  Proceed to the <a href=index.php>board list</a>.";
 100                         }
 101                 }
 102         }
 103 }
 104 else
 105 {
 106         ?>
 107 <form method=post action=login.php>
 108 Username: <input type=text name=userid><br>
 109 Password: <input type=password name=password><br><br>
 110 <input type=submit name=submit value=Login> <input type=reset>
 111 </form>
 112 <br><br>
 113 Or <a href=register.php>register</a>.
 114 <br><br>
 115 Have you <a href=forgotpass.php>forgotten</a> your password?
 116 <?php }
 117 ?>