Файл: login.php
Строк: 89
<?php
include_once 'sys/inc/start.php';
include_once 'sys/inc/compress.php';
include_once 'sys/inc/sess.php';
include_once 'sys/inc/home.php';
include_once 'sys/inc/settings.php';
include_once 'sys/inc/db_connect.php';
include_once 'sys/inc/ipua.php';
include_once 'sys/inc/fnc.php';
include_once 'sys/inc/shif.php';
$show_all = true; // показ для всех
$input_page = true;
include_once 'sys/inc/user.php';
only_unreg();
$_SESSION['aut_captcha'] ++;
lang::start('login');
if (isset($_GET['id']) && isset($_GET['pass']) and $set['avto_login_set'] == 1) {
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `id` = '" . intval($_GET['id']) . "' AND `pass` = '" . shif($_GET['pass']) . "' LIMIT 1"), 0) == 1) {
$user = get_user($_GET['id']);
$_SESSION['id_user'] = $user['id'];
mysql_query("UPDATE `user` SET `date_aut` = " . time() . " , `date_last` = " . time() . " WHERE `id` = '$user[id]' LIMIT 1");
mysql_query("INSERT INTO `user_log` (`id_user`, `time`, `ua`, `ip`, `method`) values('$user[id]', '$time', '$user[ua]' , '$user[ip]', '0')");
} else {
$err[] = lang('Неправильный логин или пароль');
}
} elseif (isset($_POST['aut_save'], $_POST['nick']) and $_POST['chislo'] != $_SESSION['captcha']) {
$err[] = lang('Код с картинки введен не верно');
} elseif (isset($_POST['nick']) && isset($_POST['pass'])) {
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `nick` = '" . mysql_real_escape_string($_POST['nick']) . "' AND `pass` = '" . shif($_POST['pass']) . "' LIMIT 1"), 0)) {
$user = mysql_fetch_assoc(mysql_query("SELECT `id` FROM `user` WHERE `nick` = '" . mysql_real_escape_string($_POST['nick']) . "' AND `pass` = '" . shif($_POST['pass']) . "' LIMIT 1"));
$_SESSION['id_user'] = $user['id'];
$user = get_user($user['id']);
mysql_query("INSERT INTO `user_log` (`id_user`, `time`, `ua`, `ip`, `method`) values('$user[id]', '$time', '$user[ua]' , '$user[ip]', '1')");
#сохранение данных в COOKIE
if (isset($_POST['aut_save']) && $_POST['aut_save']) {
setcookie('id_user', $user['id'], time() + 60 * 60 * 24 * 365);
setcookie('pass', cookie_encrypt($_POST['pass'], $user['id']), time() + 60 * 60 * 24 * 365);
}
if ($set['antihah_hash'] == 1 and $user['hash_set'] == 1) {
$hash = " `hash` = '" . md5(md5($ip . md5($ua) . $user['id'])) . "',";
} else {
$hash = null;
}
mysql_query("UPDATE `user` SET $hash `date_aut` = '$time', `date_last` = '$time' WHERE `id` = '$user[id]' LIMIT 1");
} else {
$err[] = lang('Неправильный логин или пароль');
}
} elseif (isset($_COOKIE['id_user'], $_COOKIE['pass']) && $_COOKIE['id_user'] && $_COOKIE['pass']) {
cache_delete::user($_COOKIE['id_user']);
$hash_set = count::query('user', " `id` = " . intval($_COOKIE['id_user']) . " AND `hash_set` = 1");
if ($set['antihah_hash'] == 1 AND $hash_set == 1) {
$hash = " `hash` = '" . md5(md5($ip . md5($ua) . $_COOKIE['id_user'])) . "' AND ";
} else {
$hash = null;
}
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE $hash `id` = " . intval($_COOKIE['id_user']) . " AND `pass` = '" . shif(cookie_decrypt($_COOKIE['pass'], intval($_COOKIE['id_user']))) . "' LIMIT 1"), 0) == 1) {
$user = get_user($_COOKIE['id_user']);
$_SESSION['id_user'] = $user['id'];
mysql_query("UPDATE `user` SET `date_aut` = '$time', `date_last` = '$time' WHERE `id` = '$user[id]' LIMIT 1");
mysql_query("INSERT INTO `user_log` (`id_user`, `time`, `ua`, `ip`, `method`) values('$user[id]', '$time', '$user[ua]' , '$user[ip]', '2')");
$user['type_input'] = 'cookie';
} else {
$err[] = lang('Ошибка авторизации по COOKIE');
setcookie('id_user');
setcookie('pass');
}
} else {
$err[] = lang('Ошибка авторизации');
}
if (!isset($user)) {
$set['title'] = lang('Авторизация');
include_once 'sys/inc/thead.php';
title();
aut();
err();
header('Refresh: 1; url=/aut.php');
echo "<div class='list-group-item'>";
echo "<a href='/aut.php?'><span class='fa fa-arrow-left fa-fw'></span> " . lang('Повторить попытку входа') . "</a><br />";
echo "</div>";
include_once H . 'sys/inc/tfoot.php';
exit;
}
$set['title'] = lang('Дайджест');
$_SESSION['aut_captcha'] = 0;
if ($set['web']) { // для web темы
if (is_dir(H . 'style/themes/' . $user['set_them2'])) {
$set['set_them'] = $user['set_them2'];
} else {
mysql_query("UPDATE `user` SET `set_them2` = '$set[set_them2]' WHERE `id` = '$user[id]' LIMIT 1");
}
} else {
if (is_dir(H . 'style/themes/' . $user['set_them'])) {
$set['set_them'] = $user['set_them'];
} else {
mysql_query("UPDATE `user` SET `set_them` = '$set[set_them]' WHERE `id` = '$user[id]' LIMIT 1");
}
}
//Загрузка дополнительных плагинов
$Search = glob(H . 'sys/login/*.php');
foreach ($Search as $load_plugins) {
sort($Search);
include_once $load_plugins;
}
if (isset($_GET['return'])) {
header('Location: ' . urldecode($_GET['return']));
} else {
#включаем модуль возврата
if ($set['aut_ref'] == 1) {
exit(header("Location: " . $_SESSION['ref_loc'] . "?&aut_ref"));
} else {
exit(header("Location: /user/start"));
}
}
exit;