.
See AUTHORS to learn who helped make it become a reality.
*/#### #### #### #### #### #### #### #### #### ####
// global _DBNAME, _DBUSERID, _DBPWD, _DBSERVER, $session_time;
include 'include.php';
if( !isset($_POST['save_cookies']))
$_POST['save_cookies'] = 0;
if( stristr($_POST['pass'], "'") || stristr($_POST['pass'], '"') || stristr($_POST['usr'], "'") || stristr($_POST['usr'], '"'))
{
WriteHead('phpLogCon :: ' , _MSGAccDen, '', '', _MSGAccDen, 0);
print '
..:: ' . _MSGNamInvChr . ' ::..
';
echo '
..:: ', _MSGBac2Ind, ' ::..';
db_close($global_Con);
exit;
}
else
{
$query = "SELECT UserIDText, Password, DisplayName FROM Users WHERE UserIDText LIKE '" . $_POST['usr'] . "' AND Password LIKE '" . $_POST['pass'] . "'";
$result = db_exec($global_Con, $query);// or die(db_die_with_error(_MSGInvQur . " :" . $query));
$num = db_num_rows($result);
$result = db_fetch_singleresult($result);
/*
echo $num . "
";
echo $result["UserIDText"] . "
";
echo $result["phplogcon_lastlogin"] . "
";
exit;
*/
if ($num == 0)
{
WriteHead("phpLogCon :: " . _MSGAccDen, "", "", _MSGAccDen, 0);
print "
..:: " . _MSGFalLog . " ::..
";
echo "
..:: " . _MSGBac2Ind . " ::..";
db_close($global_Con);
exit;
}
else
{
// $dat = now();
// db_exec($global_Con, "UPDATE Users SET phplogcon_lastlogin = ".dbc_sql_timeformat($dat)." WHERE UserIDText LIKE '".$_POST["usr"]."'");
session_register('save_cookies');
if($_POST['save_cookies'] == 1)
{
$_SESSION['save_cookies'] = $_POST['save_cookies'];
setcookie("valid", 1, _COOKIE_EXPIRE, "/");
setcookie("usr", $result["UserIDText"], _COOKIE_EXPIRE, "/");
setcookie("usrdis", $result["DisplayName"], _COOKIE_EXPIRE, "/");
}
else
$_SESSION['save_cookies'] = 0;
session_register("usr");
session_register("usrdis");
$_SESSION["usr"] = $result["UserIDText"];
$_SESSION["usrdis"] = $result["DisplayName"];
LoadUserConfig();
// Loading Users Filter Config when enabled
if($_SESSION['savefiltersettings'])
LoadFilterConfig();
db_close($global_Con);
header("Location: index.php");
}
}
?>