aboutsummaryrefslogtreecommitdiff
path: root/oldwww/member_login.php
diff options
context:
space:
mode:
authorHorus32014-09-25 10:33:47 +0200
committerHorus32014-09-25 10:33:47 +0200
commit1fe76ba743a3418da9a0883b29756d442384d0bc (patch)
tree091910ffd183d94c0f8b70a8f4c362f733033b03 /oldwww/member_login.php
parent2036626b560f22efd59673187a2de3b1319fcf8a (diff)
downloadjungegemeinde-1fe76ba743a3418da9a0883b29756d442384d0bc.tar.gz
init
Diffstat (limited to 'oldwww/member_login.php')
-rw-r--r--oldwww/member_login.php109
1 files changed, 0 insertions, 109 deletions
diff --git a/oldwww/member_login.php b/oldwww/member_login.php
deleted file mode 100644
index 8628a44..0000000
--- a/oldwww/member_login.php
+++ /dev/null
@@ -1,109 +0,0 @@
-<?php
-
-/* Copyright Maximilian Möhring, 2013
-Licensed under the GPL. Read LICENSE for more Information.*/
-
-include('auth.php');
-include("header.php");
-
-$name = $_SESSION["username"];
-
-if ($_SESSION["username"] == "jg-adlershof"){
- $account ="<td><a href='member_login.php'>Login</a></td>
- <td>|</td>
- <td><a href='register.php'>Register</a></td>
- <td>|</td>
-" ;
- $name = "Gast";
-
-} else {
- header("Location: account.php");
- exit;
- $account ="<td><a href='account.php'>Account</a></td>
- <td>|</td>
-";
-}
-
-if ($_SERVER['REQUEST_METHOD'] == 'POST') {
- $username = $_POST["username"];
- $passwort = $_POST["password"];
-
- $safe_username = SQLite3::escapeString("$username");
- $safe_passwort = SQLite3::escapeString("$passwort");
-
- $db_check = new SQLite3("../database/database.sqlite");
- $salt_db = $db_check->query("SELECT salt FROM user WHERE name='$safe_username';");
- while($salt_array = $salt_db->fetchArray(SQLITE3_NUM)){
- foreach($salt_array as $firstelement){
- $salt=$firstelement;
- }
- }
-
- $password = "$salt"."$passwort";
- $hash_password = md5($password);
- for($i=0;$i<15000;$i++)
- $hash_password = md5($hash_password);
-
- $real_password_db = $db_check->query("SELECT password FROM user WHERE name='$safe_username';");
- while($real_password_array = $real_password_db->fetchArray(SQLITE3_NUM)){
- foreach($real_password_array as $secondelement){
- $real_password=$secondelement;
- }
- }
-
- if ($real_password == $hash_password) {
-
- $_SESSION["username"] = $_POST["username"];
- header("Location: member_login.php?stat=1");
-
- } else {
- header("Location: member_login.php?stat=2");
- }
-
-} else {
-
-if ($_GET["stat"] == 2) {
- $failure="<br><div style='color:red;'>Name und/oder Passwort sind falsch!</div>";
-} else {
- if ($_GET["stat"] == 1) {
- header("Location: account.php");
- exit;
- }
-}
-
-
-echo "
-
-<div id='content_container' align='center'>
- <br>
- <div class='kleineschrift'>
- <div class='ueberschrift'>
- <p>JUNGE GEMEINDE ADLERSHOF</p>
- </div>
-
-<br>
-
- <div id='behaelter' align='center' class=''>
- <div class='katze'>
- Hallo $name, <br>
- hier kannst du dich für den Mitgliederbereich einloggen.
- </div><br>
-
- Noch kein eigenes Passwort? Dann <a style='text-decoration:underline;' href='register.php'>registrier</a> dich einfach.<br><br>
- $failure
- <form method='post' action='member_login.php' >
- <p><input type='text' name='username' size='40'/></p>
- <p><input type='password' name='password' size='40'/></p>
-
-
- <p><input type='submit' name='submit' value='Miau!'/></p>
-
- </form>
- </div>
-</div>
-</div>
-</body>
-</html>
-";
-}
-?>