inc/prelogin.php

   1 <?php
   2 /*
   3     This program is free software; you can redistribute it and/or modify
   4     it under the terms of the Revised BSD License.
   5
   6     This program is distributed in the hope that it will be useful,
   7     but WITHOUT ANY WARRANTY; without even the implied warranty of
   8     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   9     Revised BSD License for more details.
  10
  11     Copyright 2004-2019 iDB Support - https://idb.osdn.jp/support/category.php?act=view&id=1
  12     Copyright 2004-2019 Game Maker 2k - https://idb.osdn.jp/support/category.php?act=view&id=2
  13
  14     $FileInfo: prelogin.php - Last Update: 08/02/2019 SVN 905 - Author: cooldude2k $
  15 */
  16 $File3Name = basename($_SERVER['SCRIPT_NAME']);
  17 if ($File3Name=="prelogin.php"||$File3Name=="/prelogin.php") {
  18         require('index.php');
  19         exit(); }
  20 $_SESSION['CheckCookie']="done";
  21 $querylog2 = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"Name\"='%s' AND \"UserPassword\"='%s' AND \"id\"=%i LIMIT 1", array($_COOKIE['MemberName'],$_COOKIE['SessPass'],$_COOKIE['UserID']));
  22 $resultlog2=sql_query($querylog2,$SQLStat);
  23 $numlog2=sql_num_rows($resultlog2);
  24 if($numlog2==1) {
  25 $YourIDAM=sql_result($resultlog2,0,"id");
  26 $YourNameAM=sql_result($resultlog2,0,"Name");
  27 $YourGroupAM=sql_result($resultlog2,0,"GroupID");
  28 $YourGroupIDAM=$YourGroupAM;
  29 $YourPassAM=sql_result($resultlog2,0,"UserPassword");
  30 $gquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"id\"=%i LIMIT 1", array($YourGroupAM));
  31 $gresult=sql_query($gquery,$SQLStat);
  32 $YourGroupAM=sql_result($gresult,0,"Name");
  33 sql_free_result($gresult);
  34 $BanError = null;
  35 $YourTimeZoneAM=sql_result($resultlog2,0,"TimeZone");
  36 $UseThemeAM=sql_result($resultlog2,0,"UseTheme");
  37 $YourDSTAM=sql_result($resultlog2,0,"DST");
  38 $YourLastPostTime=sql_result($resultlog2,0,"LastPostTime");
  39 $YourBanTime=sql_result($resultlog2,0,"BanTime");
  40 sql_free_result($resultlog2);
  41 $CGMTime = $utccurtime->getTimestamp();
  42 if($YourBanTime!=0&&$YourBanTime!=null) {
  43 if($YourBanTime>=$CGMTime) { $BanError = "yes"; }
  44 if($YourBanTime<0) { $BanError = "yes"; } }
  45 $NewDay=$utccurtime->getTimestamp();
  46 $NewIP=$_SERVER['REMOTE_ADDR'];
  47 if($BanError!="yes") {
  48 $queryup = sql_pre_query("UPDATE \"".$Settings['sqltable']."members\" SET \"LastActive\"=%i,\"IP\"='%s' WHERE \"id\"=%i", array($NewDay,$NewIP,$YourIDAM));
  49 $_SESSION['Theme']=$UseThemeAM;
  50 $_SESSION['MemberName']=$_COOKIE['MemberName'];
  51 $_SESSION['UserID']=$YourIDAM;
  52 $_SESSION['UserIP']=$_SERVER['REMOTE_ADDR'];
  53 $_SESSION['UserTimeZone']=$YourTimeZoneAM;
  54 $_SESSION['UserGroup']=$YourGroupAM;
  55 $_SESSION['UserGroupID']=$YourGroupIDAM;
  56 $_SESSION['UserDST']=$YourDSTAM;
  57 $_SESSION['UserPass']=$YourPassAM;
  58 $_SESSION['LastPostTime'] = $YourLastPostTime;
  59 $_SESSION['DBName']=$Settings['sqldb'];
  60 if($cookieDomain==null) {
  61 setcookie("MemberName", $YourNameAM, time() + (7 * 86400), $cbasedir);
  62 setcookie("UserID", $YourIDAM, time() + (7 * 86400), $cbasedir);
  63 setcookie("SessPass", $YourPassAM, time() + (7 * 86400), $cbasedir); }
  64 if($cookieDomain!=null) {
  65 if($cookieSecure===true) {
  66 setcookie("MemberName", $YourNameAM, time() + (7 * 86400), $cbasedir, $cookieDomain, 1);
  67 setcookie("UserID", $YourIDAM, time() + (7 * 86400), $cbasedir, $cookieDomain, 1);
  68 setcookie("SessPass", $YourPassAM, time() + (7 * 86400), $cbasedir, $cookieDomain, 1); }
  69 if($cookieSecure===false) {
  70 setcookie("MemberName", $YourNameAM, time() + (7 * 86400), $cbasedir, $cookieDomain);
  71 setcookie("UserID", $YourIDAM, time() + (7 * 86400), $cbasedir, $cookieDomain);
  72 setcookie("SessPass", $YourPassAM, time() + (7 * 86400), $cbasedir, $cookieDomain); } }
  73 /*redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false)); $urlstatus = 302;
  74 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die();*/
  75 } } if($numlog2<=0||$numlog2>1||$BanError=="yes") { session_unset();
  76 if($cookieDomain==null) {
  77 setcookie("MemberName", null, $utccurtime->getTimestamp() - 3600, $cbasedir);
  78 setcookie("UserID", null, $utccurtime->getTimestamp() - 3600, $cbasedir);
  79 setcookie("SessPass", null, $utccurtime->getTimestamp() - 3600, $cbasedir);
  80 setcookie(session_name(), "", $utccurtime->getTimestamp() - 3600, $cbasedir); }
  81 if($cookieDomain!=null) {
  82 if($cookieSecure===true) {
  83 setcookie("MemberName", null, $utccurtime->getTimestamp() - 3600, $cbasedir, $cookieDomain, 1);
  84 setcookie("UserID", null, $utccurtime->getTimestamp() - 3600, $cbasedir, $cookieDomain, 1);
  85 setcookie("SessPass", null, $utccurtime->getTimestamp() - 3600, $cbasedir, $cookieDomain, 1);
  86 setcookie(session_name(), "", $utccurtime->getTimestamp() - 3600, $cbasedir, $cookieDomain, 1); }
  87 if($cookieSecure===false) {
  88 setcookie("MemberName", null, $utccurtime->getTimestamp() - 3600, $cbasedir, $cookieDomain);
  89 setcookie("UserID", null, $utccurtime->getTimestamp() - 3600, $cbasedir, $cookieDomain);
  90 setcookie("SessPass", null, $utccurtime->getTimestamp() - 3600, $cbasedir, $cookieDomain);
  91 setcookie(session_name(), "", $utccurtime->getTimestamp() - 3600, $cbasedir, $cookieDomain); } }
  92 unset($_COOKIE[session_name()]);
  93 $_SESSION = array(); //session_unset(); session_destroy();
  94 $temp_user_ip = $_SERVER['REMOTE_ADDR'];
  95 $exptime = $utccurtime->getTimestamp() - ini_get("session.gc_maxlifetime");
  96 sql_query(sql_pre_query("DELETE FROM \"".$Settings['sqltable']."sessions\" WHERE \"expires\" < %i OR ip_address='%s'", array($exptime,$temp_user_ip)),$SQLStat);
  97 redirect("location",$rbasedir.url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],false)); sql_free_result($resultlog2); sql_free_result($gresult);
  98 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
  99 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 100 ?>