Beiträge von handi

<?php
define('PMF_INCLUDE', 1);
define('ACCESS_PAGE', 'public');
define('PMF_NO_SESSION', true);
require('head.php');


#
#
### Formular
if (empty($_POST['Name']) && empty($_GET['action'])) {
    eval ('echo "'.$_style->get('login').'";');






#
#
### Login


} elseif (!empty($_POST['Name']) && empty($_GET['action'])) {
    // MD5


    $Pass = md5(gpc_stripslashes($_POST['Pass']));
    $result = $_db->query('SELECT u.`id`, u.name, u.`pass`, u.`last_action`, u.`stay_login`, u.`session`, SUM(g_val.`value`) AS `login`
                           FROM `'.$_cfg['DB_PREFIX'].'user` AS u
                                LEFT JOIN `'.$_cfg['DB_PREFIX'].'group_value` AS g_val ON (u.`group_id` = g_val.`group_id` AND g_val.`board_id` = 0),
                                `'.$_cfg['DB_PREFIX'].'group_var` AS g_var
                           WHERE u.`name` LIKE \''.gpc_addslashes($_POST['Name']).'\'
                             AND g_val.`var_id` = g_var.`id`
                             AND g_var.`name` = \'login\'
                           GROUP BY u.`id`');
    $Daten = $_db->fetch_array($result);


    switch ($_db->num_rows($result)) {
        ### Benutzer gefunden (name)
        case 1:
            # Login !!!
            if ($Daten['login'] > 0 && $Daten['pass'] == $Pass) {
                // Cookie
                if (!empty($Daten['stay_login'])) {
                    cookie('pmfUserId', $Daten['id']);
                    cookie('pmfPass', $Pass);

                // Session-Cookie
                } elseif (!empty($Daten['session'])) {
                    cookie('pmfSess', $_sess['id'], 0);
                    cookie('proxy',$_sess[id],0);
                // Session
                } else {
                    session_register('USER');
                    session_register('PASS');
                    $_SESSION['USER'] = $Daten['id'];
                    $_SESSION['PASS'] = $Pass;
                }

                // letztes Login
                $_db->u_query('UPDATE `'.$_cfg['DB_PREFIX'].'user`
                               SET `last_login` = `last_action`
                               WHERE `id` = '.$Daten['id']);

                // alte Session löschen
                $_db->query('DELETE FROM `'.$_cfg['DB_PREFIX'].'session`
                               WHERE `sess` = \''.addslashes($_sess['id']).'\'
                                 AND `user_id` = 0');

                // Session Speichern
                $_db->query('REPLACE INTO `'.$_cfg['DB_PREFIX'].'session` (`sess`,`ip`,`user_id`,`last_action`,`site`,`browser`)
                             VALUES (\''.addslashes($_sess['id']).'\',\''.addslashes($_SERVER['REMOTE_ADDR']).'\','.intval($Daten['id']).','.PMF_TIME.',\''.addslashes( str_replace($_sess['url'], '', basename($_SERVER['REQUEST_URI']))).'\',\''.addslashes($_SERVER['HTTP_USER_AGENT']).'\')');

                // Benutzer Daten
                $_user = get_user_info($Daten['id']);

                // weiterleitung
                msg('error_login', (!empty($_POST['goto']) ? urldecode($_POST['goto']) : 'index.php?'.$_sess['url']));
                break;


            # Passwort Falsch !!!
            } elseif ($Daten['login'] > 0 && $Daten['pass'] != $Pass) {
                msg('error_login_fault', 'back()');
                break;

            # Benutzer gesperrt !!!
            } elseif (empty($Daten['login'])) {
                msg('error_login_del', 'back()');
                break;
            }


            
        ### Benutzer nicht gefunden
        default:
            msg('error_login_fault', 'back()');
            break;
    }






#
#
### Logout !!!
} elseif ($_GET['action'] == 'logout') {
    # Session löschen
    $_db->query('DELETE FROM `'.$_cfg['DB_PREFIX'].'session`
                 WHERE `user_id` = '.intval($_user['id']));
    session_destroy();
    unset($_SESSION);
    // Cookie löschen
    cookie('pmfUserId', '');
    cookie('pmfPass', '');
    cookie('pmfSess', '');
    cookie('pmfHidden', '');
    cookie('pmfTopics', '');
    cookie('pmfacpnav', '');
    // weiterleitung ?
    $goto = !empty($_GET['goto']) ? gpc_stripslashes($_GET['goto']) : 'index.php?'.$_sess['url'];
    msg('error_logout', $goto);
}




footer();




?>