function
user_login_check () {
if
( isset (
$_POST
[
'user_login_sub'
]) AND isset (
$_POST
[
'name'
]) AND isset (
$_POST
[
'pass'
]) ) {
debug (
'posts vorhanden'
);
$name
= escape_nickname(
$_POST
[
'name'
]);
if
(
$name
!=
$_POST
[
'name'
] OR
strlen
(
$_POST
[
'name'
]) > 15) {
return
false;
}
$erg
= db_query(
"SELECT name, loginname, id,recht,pass,llogin FROM prefix_user WHERE loginname = BINARY '"
.
$name
.
"'"
);
if
( db_num_rows(
$erg
) == 1 ) {
debug (
'user gefunden'
);
$row
= db_fetch_assoc(
$erg
);
if
(
$row
[
'pass'
] == md5(
$_POST
[
'pass'
]) ) {
debug (
'passwort stimmt ... '
.
$row
[
'name'
]);
$_SESSION
[
'authname'
] =
$row
[
'name'
];
$_SESSION
[
'loginname'
] =
$row
[
'loginname'
];
$_SESSION
[
'authid'
] =
$row
[
'id'
];
$_SESSION
[
'authright'
] =
$row
[
'recht'
];
$_SESSION
[
'lastlogin'
] =
$row
[
'llogin'
];
$_SESSION
[
'authsess'
] = session_und_cookie_name();
db_query(
"UPDATE prefix_online SET uid = "
.
$_SESSION
[
'authid'
].
" WHERE sid = '"
.session_id().
"'"
);
setcookie(
$_SESSION
[
'authsess'
],
$row
[
'id'
].
'='
.
$row
[
'pass'
] , time() + 31104000,
"/"
);
user_set_grps_and_modules();
return
(true);
}
}
global
$menu
;
$menu
->set_url (0,
'user'
);
$menu
->set_url (1,
'login'
);
}
return
( false );
}
function
user_auto_login_check () {
$cn
= session_und_cookie_name();
$dat
=
explode
(
'='
,
$_COOKIE
[
$cn
]);
$id
=
$pw
= 0;
if
(isset(
$dat
[0])) {
$id
= escape(
$dat
[0],
'integer'
); }
if
(isset(
$dat
[1])) {
$pw
=
$dat
[1]; }
debug (
' pw '
.
$pw
);
debug (
' id '
.
$id
);
$erg
= db_query(
"SELECT name,loginname,id,recht,pass,llogin FROM prefix_user WHERE id = "
.
$id
);
if
(db_num_rows(
$erg
) == 1) {
debug (
'benutzer gefunden'
);
$row
= db_fetch_assoc(
$erg
);
if
(
$row
[
'pass'
] ==
$pw
) {
debug (
'passwoerter stimmen'
);
debug (
$row
[
'name'
]);
$_SESSION
[
'authname'
] =
$row
[
'name'
];
$_SESSION
[
'loginname'
] =
$row
[
'loginname'
];
$_SESSION
[
'authid'
] =
$row
[
'id'
];
$_SESSION
[
'authright'
] =
$row
[
'recht'
];
$_SESSION
[
'lastlogin'
] =
$row
[
'llogin'
];
$_SESSION
[
'authsess'
] =
$cn
;
db_query(
"UPDATE prefix_online SET uid = "
.
$_SESSION
[
'authid'
].
" WHERE sid = '"
.session_id().
"'"
);
setcookie(
$cn
,
$row
[
'id'
].
'='
.
$row
[
'pass'
], time() + 31104000,
"/"
);
return
(true);
}
}
user_logout ();
return
(false);
}