Forum PHP.pl

[PHP] pobierz, plaintext 
<?php
 
    session_start();
    
    include "config.php";
    
    if (isset($_SESSION['user_id'])) {
        echo "zalogowałeś się jako <b>".$user_name."</b><br />";
        echo "E-mail: ".$user_email."<br>
                Data dołączenia: ".$user_date."<br>";
        echo "<a href=\"logout.php\">[LOGOUT]</a>";
    }
    else {
        
        echo "<form method=\"GET\" action=\"login.php\">
                <input type=\"text\" name=\"login\"><br>
                <input type=\"password\" name=\"pass\"><br>
                <input type=\"submit\" name=\"log\" value=\"Login\">
              </form>";
            
    }
            
?>
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
<?php
 
    session_start();
 
    $db_host = "localhost";
    $db_user = "root";
    $db_pass = "root";
    $db_base = "baza";
    
    $db = mysql_connect($db_host, $db_user, $db_pass);
    mysql_select_db($db_base, $db);
    
    if (isset($_SESSION['user_id'])) {
        $user_id     = $_SESSION['user_id'];
        $user_name   = $_SESSION['user_name'];
        $user_email  = $_SESSION['user_email'];
        $user_rights = $_SESSION['user_rights'];
        $user_date   = $_SESSION['user_date'];
    }
 
?>
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
<?php
 
    session_start();
    
    include "config.php";
 
    $user_login = $_GET['login'];
    $user_pass  = $_GET['pass'];
    
    $sql = "SELECT * FROM user WHERE user_name = '".$user_login."' AND user_pass = '".$user_pass."';";
    $result = mysql_query($sql)
        or die("Podałeś błędny login lub hasło");
        
    $rows = mysql_num_rows($result);
    
    if ($rows == 1) {
        
        $r = mysql_fetch_assoc($result);
        session_register("user_id");
        session_register("user_name");
        session_register("user_email");
        session_register("user_rights");
        session_register("user_date");
        
        $_SESSION['user_id']     = $r['user_id'];
        $_SESSION['user_name']   = $r['user_name'];
        $_SESSION['user_email']  = $r['user_email'];
        $_SESSION['user_rights'] = $r['user_rights'];
        $_SESSION['user_date']   = $r['user_date'];
        
        header("Location: index.php");
    }
    else {
        echo "Podałeś błędny login lub hasło... <br> <a href=\"index.php\">Powrót</a>";
    }
 
?>
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
<?php
 
    session_start();
    session_destroy();
    
    header("Location: index.php");
 
?>
[PHP] pobierz, plaintext 

[SQL] pobierz, plaintext 
CREATE TABLE `user` (
  `user_id` int(30) NOT NULL AUTO_INCREMENT,
  `user_name` varchar(50) collate latin2_bin DEFAULT NULL,
  `user_pass` varchar(50) collate latin2_bin DEFAULT NULL,
  `user_email` varchar(50) collate latin2_bin DEFAULT NULL,
  `user_date` date DEFAULT NULL,
  PRIMARY KEY  (`user_id`)
);
[SQL] pobierz, plaintext 

[PHP] pobierz, plaintext 
<?php
$sql = "SELECT * FROM user WHERE user_name = '".$user_login."' AND user_pass = '".
?>
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
<?php
if (isset($_SESSION['user_id'])) {
       $user_id     = $_SESSION['user_id'];
       $user_name   = $_SESSION['user_name'];
       $user_email  = $_SESSION['user_email'];
       $user_rights = $_SESSION['user_rights'];
       $user_date   = $_SESSION['user_date'];
   }
?>
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
<?php
session_register("user_id");
       session_register("user_name");
       session_register("user_email");
       session_register("user_rights");
       session_register("user_date");
?>
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
<?php
 
    session_start();
 
    include "config.php";
 
    if (isset($_SESSION['user_id'])) {
        echo "zalogowałeś się jako <b>".$user_name."</b><br />";
        echo "E-mail: ".$user_email."<br>
                Data dołączenia: ".$user_date."<br>";
        echo "<a href=\"logout.php\">[LOGOUT]</a>";
    }
    else {
 
				if(isset($_GET['wykonano'])) {
				echo "Konto zostało utworzone! Możesz teraz sie zalogować.";
				}
        echo "<form method=\"POST\" action=\"login.php\">
                <input type=\"text\" name=\"login\"><br>
                <input type=\"password\" name=\"pass\"><br>
                <input type=\"submit\" name=\"log\" value=\"Login\">
              </form>";
				echo "<a href=\"register.php\">Rejestracja</a>";
 
    }
 
?>
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
<?php
if(isset($error)) {
$ul =<<<EOD
<ul>
$error
</ul>
EOD;
echo $ul;
}
?>
<form method="post" action="trans.php">
<table>
<tr>
<td width="100px">Nick</td>
<td>
<input type="text" name="name">
</td>
</tr>
<tr>
<td>Hasło</td>
<td>
<input type="password" name="pass1">
</td>
</tr>
<tr>
<td>Powtórz hasło</td>
<td>
<input type="password" name="pass2">
</td>
</tr>
<tr>
<td>Adres email</td>
<td>
<input type="text" name="mail">
</td>
</tr>
<tr>
<td colspan="2" align="center">
<input type="submit" name="submit" value="Rejestruj">
</td>
</tr>
</table>
</form>
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
<?php
require("config.php");
 
 
 
$name = strtolower($_POST['name']);
$pass1 = $_POST['pass1'];
$pass2 = $_POST['pass2'];
$mail = strtolower($_POST['mail']);
$date = date('Y-m-d');
$error = "";
 
 
if (empty($name)) {
$error .= "<li>Podaj nick</li>";
}
if (empty($pass1)) {
$error .= "<li>Podaj hasło</li>";
}
if (empty($pass2)) {
$error .= "<li>Powtórz hasło</li>";
}
if (empty($mail)) {
$error .= "<li>Podaj adres e-mail</li>";
}
 
$sql = "SELECT user_id FROM user WHERE user_name = '" . $name . "'";
$result = mysql_query($sql) or die(mysql_error());
$msr = mysql_num_rows($result);
 
if($msr > 0) {
$error .= "<li>Taki użytkownik już istnieje</li>";
}
 
$sql = "SELECT user_id FROM user WHERE user_email = '" . $mail . "'";
$result = mysql_query($sql) or die(mysql_error());
$msr = mysql_num_rows($result);
 
if($msr > 0) {
$error .= "<li>Jakiś użytkownik już wykorzystał ten adres e-mail</li>";
}
 
if(!empty($error)){
header("location:register.php?error=$error");
}
 
 
if ($pass2 != $pass1) {
$error .= "<li>Podane hasła różnią się!</li>";
header("location:register.php?error=$error");
}
 
if (empty($error)) {
$pass = md5($pass1);
$sql = "INSERT INTO user (user_name, user_pass, user_email, user_date)
				VALUES ('$name', '$pass', '$mail', '$date')";
$result = mysql_query($sql) or die(mysql_error());
header("location:index.php?wykonano=yes");
}
 
 
?>
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
<?php
 
    session_start();
 
    include "config.php";
 
    $user_login = $_POST['login'];
    $user_pass  = md5($_POST['pass']);
 
    $sql = "SELECT * FROM user WHERE user_name = '".$user_login."' AND user_pass = '".$user_pass."';";
    $result = mysql_query($sql)
        or die("Podałeś błędny login lub hasło");
 
    $rows = mysql_num_rows($result);
 
    if ($rows == 1) {
 
        $r = mysql_fetch_assoc($result);
        session_register("user_id");
        session_register("user_name");
        session_register("user_email");
        session_register("user_rights");
        session_register("user_date");
 
        $_SESSION['user_id']     = $r['user_id'];
        $_SESSION['user_name']   = $r['user_name'];
        $_SESSION['user_email']  = $r['user_email'];
        $_SESSION['user_rights'] = $r['user_rights'];
        $_SESSION['user_date']   = $r['user_date'];
 
        header("Location: index.php");
    }
    else {
        echo "Podałeś błędny login lub hasło... <br> <a href=\"index.php\">Powrót</a>";
    }
 
?>
[PHP] pobierz, plaintext 

[SQL] pobierz, plaintext 
"UPDATE users SET login='$login' WHERE user_id=$id LIMIT 1"
[SQL] pobierz, plaintext 

[PHP] pobierz, plaintext 
$q = "SELECT login, cotamjeszczemasz FROM users WHERE user_id=$id";
$r = @mysqli_query($dbc, $q);
 
if(mysqli_num_rows($r) == 1) {
$row = mysqli_fetch_array($r, MYSQLI_NUM);
 
echo '<input type="text" name="login" value="' . $row[0] . '">'
}
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
 $name = mysql_real_escape_string($name); 
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
 
 else {
$name = mysql_real_escape_string($imie);
$pass1 = mysql_real_escape_string($pass1);
$pass2 = mysql_real_escape_string($pass2);
$mail = mysql_real_escape_string($mail);
$date = mysql_real_escape_string($date);
$error = mysql_real_escape_string($error);
}
[PHP] pobierz, plaintext