218 lines
5.2 KiB
PHP
Executable File
218 lines
5.2 KiB
PHP
Executable File
<?
|
|
|
|
###########################################
|
|
#-----------Users login system------------#
|
|
###########################################
|
|
/* =========================================\
|
|
Author : Mohammed Ahmed(M@@king) \\
|
|
Version : 1.0 \\
|
|
Date Created: Aug 20 2005 \\
|
|
---------------------------- \\
|
|
Last Update: August 22 2005 \\
|
|
---------------------------- \\
|
|
Country : Palestine \\
|
|
City : Gaza \\
|
|
E-mail : m@maaking.com \\
|
|
MSN : m@maaking.com \\
|
|
AOL-IM : maa2pal \\
|
|
WWW : http://www.maaking.com \\
|
|
Mobile/SMS : 00972-599-622235 \\
|
|
\\
|
|
===========================================\
|
|
------------------------------------------ */
|
|
//skip the config file if somebody call it from the browser.
|
|
session_start();
|
|
|
|
if (eregi("config.php", $_SERVER['SCRIPT_NAME']))
|
|
{
|
|
Header("Location: index.php");
|
|
die();
|
|
}
|
|
|
|
//your database hostname.
|
|
$dbhost = "192.168.1.10";
|
|
//your database username.
|
|
$dbuname = "slowtwitch";
|
|
//your db password
|
|
$dbpass = "k9volqlAcpq";
|
|
$dbname = "slowtwitch";
|
|
//don't change unless you change this value in the db.
|
|
$prefix = "gforum_";
|
|
|
|
//change this
|
|
$site_name = "Slowtwitch.com";
|
|
$site_email = "aaron@gossamer-threads.com";
|
|
$site_url = "https://www.slowtwitch.com/stackreach/";
|
|
|
|
//09-Nov-2005
|
|
$phpver = phpversion();
|
|
if ($phpver < '4.1.0')
|
|
{
|
|
$_GET = $HTTP_GET_VARS;
|
|
$_POST = $HTTP_POST_VARS;
|
|
$_SERVER = $HTTP_SERVER_VARS;
|
|
}
|
|
|
|
/*
|
|
if ($phpver >= '4.0.4pl1' && strstr($_SERVER["HTTP_USER_AGENT"], 'compatible'))
|
|
{
|
|
if (extension_loaded('zlib'))
|
|
{
|
|
ob_end_clean();
|
|
ob_start('ob_gzhandler');
|
|
}
|
|
}
|
|
else if ($phpver > '4.0')
|
|
{
|
|
if (strstr($HTTP_SERVER_VARS['HTTP_ACCEPT_ENCODING'], 'gzip'))
|
|
{
|
|
if (extension_loaded('zlib'))
|
|
{
|
|
$do_gzip_compress = TRUE;
|
|
ob_start(array('ob_gzhandler', 5));
|
|
ob_implicit_flush(0);
|
|
header('Content-Encoding: gzip');
|
|
}
|
|
}
|
|
}
|
|
*/
|
|
|
|
$phpver = explode(".", $phpver);
|
|
$phpver = "$phpver[0]$phpver[1]";
|
|
if ($phpver >= 41)
|
|
{
|
|
$PHP_SELF = $_SERVER['PHP_SELF'];
|
|
}
|
|
|
|
if (!ini_get("register_globals"))
|
|
{
|
|
import_request_variables('GPC');
|
|
}
|
|
|
|
|
|
include_once("mysql.class.php");
|
|
$db = new sql_db($dbhost, $dbuname, $dbpass, $dbname, false);
|
|
if (!$db->db_connect_id)
|
|
{
|
|
|
|
echo "<br><font color=red><h3><br><center>Error:</b><br><hr><br>
|
|
<b>Connection to database failed</b><br>
|
|
<br><br><br><br><br><br><br><br><br></b></center>";
|
|
|
|
exit();
|
|
}
|
|
|
|
function is_updater()
|
|
{
|
|
if (is_logged_in($user))
|
|
{
|
|
$username = base64_decode($_SESSION['user']);
|
|
}
|
|
|
|
return (is_admin() === true);
|
|
}
|
|
|
|
function is_admin()
|
|
{
|
|
if (is_logged_in($user))
|
|
{
|
|
$username = base64_decode($_SESSION['user']);
|
|
if ($username != "Slowman" && $username != "Rappstar" && $username != "Herbert" && $username != "AWright" )
|
|
{
|
|
return false;
|
|
}
|
|
else
|
|
{
|
|
return true;
|
|
}
|
|
}
|
|
else
|
|
{
|
|
return false;
|
|
}
|
|
}
|
|
|
|
function get_sid()
|
|
{
|
|
if (isset($_SESSION['cookie']) and $_SESSION['cookie'])
|
|
{
|
|
return '';
|
|
}
|
|
else
|
|
{
|
|
return '&' . SID;
|
|
}
|
|
}
|
|
|
|
function get_user_id()
|
|
{
|
|
if (!is_logged_in() AND !isset( $_SESSION['user_id'] ))
|
|
return null;
|
|
return base64_decode($_SESSION['user_id']);
|
|
|
|
}
|
|
|
|
//global function for checking whether user is logged in or not.
|
|
//you will notice we will use it everwhere in the script.
|
|
function is_logged_in($user)
|
|
{
|
|
global $db; //, $prefix;
|
|
$prefix = "gforum_";
|
|
|
|
// return true if we're already logged in
|
|
if (isset($_SESSION['user']) && $_SESSION['user'] != '')
|
|
{
|
|
return 1;
|
|
}
|
|
|
|
// try and get the session id
|
|
if (isset($_REQUEST['gforum_1022870964_session']))
|
|
{
|
|
$session_id = $_REQUEST['gforum_1022870964_session'];
|
|
}
|
|
else if ($_REQUEST['from'] == 'gforum')
|
|
{
|
|
foreach ($_COOKIE as $key => $value)
|
|
{
|
|
if (preg_match('/gforum.*session/', $key))
|
|
{
|
|
$session_id = $value;
|
|
break;
|
|
}
|
|
}
|
|
if (!isset($session_id))
|
|
{
|
|
return 0;
|
|
}
|
|
}
|
|
// return false if we have no login info
|
|
else
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
$result = mysql_query("SELECT session_user_id FROM " . $prefix . "Session WHERE session_id='$session_id'") or die(mysql_error());
|
|
$row = mysql_fetch_array($result);
|
|
$user_id = $row['session_user_id'];
|
|
$result = mysql_query("SELECT user_username,user_password,user_last_logon FROM " . $prefix . "User WHERE user_id='$user_id'");
|
|
$row = mysql_fetch_array($result);
|
|
|
|
$_SESSION['user'] = base64_encode($row['user_username']);
|
|
$_SESSION['password'] = base64_encode($row['user_password']);
|
|
$_SESSION['user_id'] = base64_encode($user_id);
|
|
$_SESSION['session_id'] = $session_id;
|
|
$_SESSION['cookie'] = !(isset($_REQUEST['session']));
|
|
|
|
if ($_SESSION['user_id'] == '')
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
// we're now logged in, so return 1
|
|
return 1;
|
|
|
|
// TODO: SLOWTWITCH CHANGE END
|
|
}
|
|
|
|
?>
|