mirror of
https://github.com/brian8544/turtle-wow.git
synced 2024-12-27 18:04:35 +00:00
103 lines
4.3 KiB
PHP
103 lines
4.3 KiB
PHP
|
<?php
|
|||
|
|
|
|||
|
|
global $smarty;
|
|||
|
|
global $conf_file;
|
|||
|
|
|
|||
|
|
global $rDB;
|
|||
|
|
global $UDWBaseconf;
|
|||
|
|
|
|||
|
|
$smarty->config_load($conf_file, 'account');
|
|||
|
|
|
|||
|
|
if (($_REQUEST['account'] == 'signup') and (isset($_POST['username'])) and (isset($_POST['password'])) and (isset($_POST['c_password'])) and ($UDWBaseconf['register'] === true)) {
|
|||
|
|
// Совпадают ли введенные пароли?
|
|||
|
|
if ($_POST['password'] != $_POST['c_password']) {
|
|||
|
|
$smarty->assign('signup_error', $smarty->get_config_vars('Different_passwords'));
|
|||
|
|
} else {
|
|||
|
|
// Существует ли уже такой пользователь?
|
|||
|
|
if ($rDB->selectCell('SELECT Count(id) FROM ' . REALMD . '.account WHERE username=? LIMIT 1', $_POST['username']) == 1) {
|
|||
|
|
$smarty->assign('signup_error', $smarty->get_config_vars('Such_user_exists'));
|
|||
|
|
} else {
|
|||
|
|
// disable any inserts
|
|||
|
|
// $success = $rDB->selectCell('INSERT INTO ' . REALMD . '.account(`username`, `sha_pass_hash`, `email`, `joindate`, `expansion`, `last_ip`)
|
|||
|
|
// VALUES (?, ?, ?, NOW(), ?, ?)', $_POST['username'], create_usersend_pass($_POST['username'], $_POST['password']), (isset($_POST['email'])) ? $_POST['email'] : '', $UDWBaseconf['expansion'], (isset($_SERVER["REMOTE_ADDR"])) ? $_SERVER["REMOTE_ADDR"] : ''
|
|||
|
|
// );
|
|||
|
|
// if ($success > 0) {
|
|||
|
|
// // Все отлично, авторизуем
|
|||
|
|
// $_REQUEST['account'] = 'signin';
|
|||
|
|
// } else {
|
|||
|
|
// // Неизвестная ошибка
|
|||
|
|
// $smarty->assign('signup_error', $smarty->get_config_vars('Unknow_error_on_account_create'));
|
|||
|
|
// }
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (($_REQUEST['account'] == 'signin') and (isset($_POST['username'])) and (isset($_POST['password']))) {
|
|||
|
|
|
|||
|
|
$shapass = strtoupper(sha1(strtoupper($_POST['username']) . ":" . strtoupper($_POST['password'])));
|
|||
|
|
$user = CheckPwd($_POST['username'], $shapass);
|
|||
|
|
if ($user == -1) {
|
|||
|
|
del_user_cookie();
|
|||
|
|
if (isset($_SESSION['username']))
|
|||
|
|
unset($_SESSION['username']);
|
|||
|
|
$smarty->assign('signin_error', $smarty->get_config_vars('Such_user_doesnt_exists'));
|
|||
|
|
} elseif ($user == 0) {
|
|||
|
|
del_user_cookie();
|
|||
|
|
if (isset($_SESSION['username']))
|
|||
|
|
unset($_SESSION['username']);
|
|||
|
|
$smarty->assign('signin_error', $smarty->get_config_vars('Wrong_password'));
|
|||
|
|
} else {
|
|||
|
|
// Имя пользователя и пароль совпадают
|
|||
|
|
$_SESSION['username'] = $user['name'];
|
|||
|
|
$_SESSION['shapass'] = $shapass;
|
|||
|
|
$_REQUEST['account'] = 'signin_true';
|
|||
|
|
$_POST['remember_me'] = (isset($_POST['remember_me'])) ? $_POST['remember_me'] : 'no';
|
|||
|
|
if ($_POST['remember_me'] == 'yes') {
|
|||
|
|
// Запоминаем пользователя
|
|||
|
|
$remember_time = time() + 3000000;
|
|||
|
|
SetCookie('remember_me', $_POST['username'] . $shapass, $remember_time);
|
|||
|
|
} else {
|
|||
|
|
del_user_cookie();
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
switch ($_REQUEST['account']):
|
|||
|
|
case '':
|
|||
|
|
// TODO: Настройки аккаунта (Account Settings)
|
|||
|
|
break;
|
|||
|
|
case 'signin_false':
|
|||
|
|
case 'signin':
|
|||
|
|
// Вход в систему
|
|||
|
|
$smarty->assign('register', $UDWBaseconf['register']);
|
|||
|
|
$smarty->display('signin.tpl');
|
|||
|
|
break;
|
|||
|
|
case 'signup_false':
|
|||
|
|
case 'signup':
|
|||
|
|
// You can change to your realm page
|
|||
|
|
//header( 'Location: http://your_realm_regpage' );
|
|||
|
|
$smarty->display('signup.tpl');
|
|||
|
|
break;
|
|||
|
|
break;
|
|||
|
|
case 'signout':
|
|||
|
|
// Выход из пользователя
|
|||
|
|
unset($user);
|
|||
|
|
session_unset();
|
|||
|
|
session_destroy();
|
|||
|
|
$_SESSION = array();
|
|||
|
|
del_user_cookie();
|
|||
|
|
case 'signin_true':
|
|||
|
|
default:
|
|||
|
|
// На предыдущую страницу
|
|||
|
|
// Срабатывает при:
|
|||
|
|
// 1. $_REQUEST['account'] = 'signout' (выход)
|
|||
|
|
// 2. $_REQUEST['account'] = 'signok' (успешная авторизация)
|
|||
|
|
// 3. Неизвестное значение $_REQUEST['account']
|
|||
|
|
$_REQUEST['next'] = (isset($_REQUEST['next'])) ? $_REQUEST['next'] : '';
|
|||
|
|
if (($_REQUEST['next'] == '?account=signin') or ($_REQUEST['next'] == '?account=signup'))
|
|||
|
|
$_REQUEST['next'] = '';
|
|||
|
|
header('Location: ?' . $_REQUEST['next']);
|
|||
|
|
break;
|
|||
|
|
endswitch;
|