Witam ! :-D
Mam wielką prośbę a mianowicie kto mógłby mi przerobić ten skrypt :
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, 'Error updating correct login data', '', __LINE__, __FILE__, $sql);
}
message_die(GENERAL_MESSAGE, $lang['Act_key_send']);
}
else
{
message_die(GENERAL_MESSAGE, $lang['Act_key_not_send']);
}
}
if( isset($HTTP_POST_VARS['login']) || isset($HTTP_GET_VARS['login']) || isset($HTTP_POST_VARS['logout']) || isset($HTTP_GET_VARS['logout']) ) {
if( ( isset($HTTP_POST_VARS['login']) || isset($HTTP_GET_VARS['login']) ) && (!$userdata['session_logged_in'] || isset($HTTP_POST_VARS['admin'])) ) {
$username = isset($HTTP_POST_VARS['username']) ? phpbb_clean_username
($HTTP_POST_VARS['username']) : ''; $password = isset($HTTP_POST_VARS['password']) ?
$HTTP_POST_VARS['password'] : '';
$sql = "SELECT user_id, username, user_password, user_email, user_active, user_actkey, user_lastvisit, user_level, user_badlogin, user_blocktime, user_email, user_lang, user_timezone
FROM " . USERS_TABLE . "
WHERE username = '" . str_replace("\'", "''", $username) . "'"; if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, 'Error in obtaining userdata', '', __LINE__, __FILE__, $sql);
}
if( $row = $db->sql_fetchrow($result) )
{
if( $row['user_level'] != ADMIN && $board_config['disable_type'] == 1 )
{
redirect(append_sid("index.$phpEx", true));
}
else
{
if( md5($password) == $row['user_password'] && $row['user_active'] && $row['user_blocktime'] < CR_TIME
) {
$sql = "UPDATE " . USERS_TABLE . " SET user_badlogin = '0'
WHERE user_id = " . $row['user_id'];
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, 'Error updating correct login data', '', __LINE__, __FILE__, $sql);
}
$row['user_badlogin'] = 0;
}
if ( ($row['user_badlogin'] < $board_config['max_login_error'] && $row['user_blocktime'] < CR_TIME) || !$board_config['max_login_error'] )
{
if ( md5($password) == $row['user_password'] && $row['user_active'] ) {
$autologin = ( isset($HTTP_POST_VARS['autologin']) ) ?
TRUE : 0;
$admin = (isset($HTTP_POST_VARS['admin'])) ? 1
: 0; $session_id = session_begin($row['user_id'], $user_ip, PAGE_INDEX, FALSE, $autologin, $admin);
if ( $session_id )
{
$sql = "UPDATE " . USERS_TABLE . " SET user_badlogin = '0'
WHERE user_id = " . $row['user_id'];
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, 'Error updating correct login data', '', __LINE__, __FILE__, $sql);
}
redirect(append_sid($url, true));
}
else
{
message_die(CRITICAL_ERROR, "Couldn't start session : login", "", __LINE__, __FILE__);
}
}
else
Chcę aby ktoś przerobił tak ten skrypt zeby nie kodował hasła czyli user_passwords w md5 . Nie chce aby w niczym kodował tylko noramalnie wysyłał hasla bez kodowania do bazy danych . Proszę o pomoc ! To jest tylko połowa skryptu ponieważ cały jest zadługi.
Kierek (IMG:
style_emoticons/default/biggrin.gif)
Powód edycji: [Daiquiri]: Dodaję tag