turtle-wow-source-kinda/Dumps/Source Code/18 - Development_Turtlehead Current/main/account.php
Brian Oost a1d5bb70b2 Init
2024-08-06 18:06:40 +02:00

103 lines
4.3 KiB
PHP
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<?php
global $smarty;
global $conf_file;
global $rDB;
global $UDWBaseconf;
$smarty->config_load($conf_file, 'account');
if (($_REQUEST['account'] == 'signup') and (isset($_POST['username'])) and (isset($_POST['password'])) and (isset($_POST['c_password'])) and ($UDWBaseconf['register'] === true)) {
// Совпадают ли введенные пароли?
if ($_POST['password'] != $_POST['c_password']) {
$smarty->assign('signup_error', $smarty->get_config_vars('Different_passwords'));
} else {
// Существует ли уже такой пользователь?
if ($rDB->selectCell('SELECT Count(id) FROM ' . REALMD . '.account WHERE username=? LIMIT 1', $_POST['username']) == 1) {
$smarty->assign('signup_error', $smarty->get_config_vars('Such_user_exists'));
} else {
// disable any inserts
// $success = $rDB->selectCell('INSERT INTO ' . REALMD . '.account(`username`, `sha_pass_hash`, `email`, `joindate`, `expansion`, `last_ip`)
// VALUES (?, ?, ?, NOW(), ?, ?)', $_POST['username'], create_usersend_pass($_POST['username'], $_POST['password']), (isset($_POST['email'])) ? $_POST['email'] : '', $UDWBaseconf['expansion'], (isset($_SERVER["REMOTE_ADDR"])) ? $_SERVER["REMOTE_ADDR"] : ''
// );
// if ($success > 0) {
// // Все отлично, авторизуем
// $_REQUEST['account'] = 'signin';
// } else {
// // Неизвестная ошибка
// $smarty->assign('signup_error', $smarty->get_config_vars('Unknow_error_on_account_create'));
// }
}
}
}
if (($_REQUEST['account'] == 'signin') and (isset($_POST['username'])) and (isset($_POST['password']))) {
$shapass = strtoupper(sha1(strtoupper($_POST['username']) . ":" . strtoupper($_POST['password'])));
$user = CheckPwd($_POST['username'], $shapass);
if ($user == -1) {
del_user_cookie();
if (isset($_SESSION['username']))
unset($_SESSION['username']);
$smarty->assign('signin_error', $smarty->get_config_vars('Such_user_doesnt_exists'));
} elseif ($user == 0) {
del_user_cookie();
if (isset($_SESSION['username']))
unset($_SESSION['username']);
$smarty->assign('signin_error', $smarty->get_config_vars('Wrong_password'));
} else {
// Имя пользователя и пароль совпадают
$_SESSION['username'] = $user['name'];
$_SESSION['shapass'] = $shapass;
$_REQUEST['account'] = 'signin_true';
$_POST['remember_me'] = (isset($_POST['remember_me'])) ? $_POST['remember_me'] : 'no';
if ($_POST['remember_me'] == 'yes') {
// Запоминаем пользователя
$remember_time = time() + 3000000;
SetCookie('remember_me', $_POST['username'] . $shapass, $remember_time);
} else {
del_user_cookie();
}
}
}
switch ($_REQUEST['account']):
case '':
// TODO: Настройки аккаунта (Account Settings)
break;
case 'signin_false':
case 'signin':
// Вход в систему
$smarty->assign('register', $UDWBaseconf['register']);
$smarty->display('signin.tpl');
break;
case 'signup_false':
case 'signup':
// You can change to your realm page
//header( 'Location: http://your_realm_regpage' );
$smarty->display('signup.tpl');
break;
break;
case 'signout':
// Выход из пользователя
unset($user);
session_unset();
session_destroy();
$_SESSION = array();
del_user_cookie();
case 'signin_true':
default:
// На предыдущую страницу
// Срабатывает при:
// 1. $_REQUEST['account'] = 'signout' (выход)
// 2. $_REQUEST['account'] = 'signok' (успешная авторизация)
// 3. Неизвестное значение $_REQUEST['account']
$_REQUEST['next'] = (isset($_REQUEST['next'])) ? $_REQUEST['next'] : '';
if (($_REQUEST['next'] == '?account=signin') or ($_REQUEST['next'] == '?account=signup'))
$_REQUEST['next'] = '';
header('Location: ?' . $_REQUEST['next']);
break;
endswitch;