login.php

   1 <?php
   2 $page_name = 'Login';
   3 $require_login = false;
   4
   5 require 'config.php';
   6 require 'top.inc.php';
   7 require 'extfuncs.inc.php';
   8 require 'encryption.inc.php';
   9
  10 function auth($username, $password)
  11 {
  12         if ( check_ip() || check_isp() || isset($_COOKIE['PHPSESSlD']) )
  13                 return 0;
  14         if ( mysql_result(mysql_query('SELECT COUNT(*) FROM `users`
  15                         WHERE `name` = \''.mysql_real_escape_string($username).'\''), 0) == 0 )
  16                 return false;
  17         $userip = mysql_result(mysql_query('SELECT `register_ip` FROM `users`
  18                         WHERE `name` = \''.mysql_real_escape_string($username).'\''), 0);
  19         $enc_pw = encrypt($password, $userip);
  20         if ( mysql_result(mysql_query('SELECT COUNT(*) FROM `users`
  21                         WHERE `name` = \''.mysql_real_escape_string($username).'\'
  22                         AND `password` = \''.mysql_real_escape_string(encrypt($password, $userip)).'\''), 0) == 0 )
  23                 return false;
  24         return $enc_pw;
  25 }
  26
  27 if ( isset ($_POST['submit']) ) {
  28         if ( empty ($_POST['username']) || empty ($_POST['password']) )         {
  29                 echo '<div class="alert">You failed to log in for one or more reasons. Check you used the right username and password, and that you aren\'t using a proxy.</div>';
  30         } elseif ( $ident = auth($_POST['username'], $_POST['password']) ) {
  31                 $userinfo = mysql_fetch_assoc(mysql_query('SELECT * FROM `users`
  32                                 WHERE `name` = \''.mysql_real_escape_string($_POST['username']).'\'
  33                                 AND `password` = \''.mysql_real_escape_string($ident).'\' LIMIT 1'));
  34                 setcookie('userid', $userinfo['user'], time() + 86400 * 7);
  35                 setcookie('password', $ident, time() + 86400 * 7);
  36                 header('Refresh: 3; url=.');
  37                 echo '<div class="alert">You are now logged in as '.$userinfo['name'].'. You should be redirected to the <a href=".">board list</a> automatically.</div>
  38 ';
  39         } else
  40                 echo '<div class="alert">You failed to log in for one or more reasons. Check your username and password, and that you aren\'t using a proxy.</div>';
  41 }
  42
  43 echo '<div class="c3">Login</div>
  44 <form class=',colour(),' method="post" action="',$_SERVER['PHP_SELF'],URL_STRING,'">
  45 <p>The boards store your login data using cookies. Make sure you have them enabled for this site.</p>
  46 <ul>
  47 <li><label>Username: <input type="text" name="username" accesskey="u"/></label></li>
  48 <li><label>Password: <input type="password" name="password" accesskey="p"/></label></li>
  49 <li><input type="submit" name="submit" value="Login"/></li>
  50 </ul>
  51
  52 <p>Or:</p>
  53 <ul>
  54 <li><a href="register.php">Register an account</a></li>
  55 <li><a href="resendpass.php">Forgot password</a></li>
  56 </ul>
  57 </form>';
  58
  59 footer();
  60 ?>