+
+
+
+
Upps, it seems to be something went wrong, sorry.
+
Have a random quote to bridge the time. Try to reload the site or check for typos in the URL.
+query("SELECT count(*) as count FROM sprueche;");
+ $row = $rows->fetchArray();
+ $numRows = $row["count"];
+
+ $zufall = mt_rand(1,$numRows);
+ $ergebnis = $db->query("SELECT * FROM sprueche where id=$zufall;");
+?>
+
+
+
+
Zitat Nummer #
+fetchArray()){
+ echo $row["spruch"];
+ }
+?>
+
diff --git a/www/functions/func_login.php b/www/functions/func_login.php
index 63c7e61..ccd99db 100755
--- a/www/functions/func_login.php
+++ b/www/functions/func_login.php
@@ -28,7 +28,7 @@ function login($db){
}
}
- if (!password_verify($password, $real_password)) {
+ if (password_verify($password, $real_password)) {
$log_in = true;
}
}
@@ -38,6 +38,7 @@ function login($db){
return LOGIN_PASSWORD;
}
+
$id = user_id($db, $username);
$banned_db = $db->query("SELECT 1 FROM banned_user WHERE user=".$id);
$banned_ar = $banned_db->fetchArray(SQLITE3_NUM);
@@ -93,7 +94,7 @@ function brutforce_protection($db){
} else {
if($db->exec("
BEGIN TRANSACTION;
- INSERT INTO banned_user (id, login_attemps, ip, session_id, time) VALUES (NULL, ".$_SESSION["login_attempts"].", ".$db->escapeString($remote_ip).", '".SQLite3::escapeString($session_id)."', '".$time."');
+ INSERT INTO banned_user (id, login_attempts, ip, session_id, time) VALUES (NULL, ".$_SESSION["login_attempts"].", '".$db->escapeString($remote_ip)."', '".SQLite3::escapeString($session_id)."', '".$time."');
COMMIT;
")){
return true;
@@ -111,14 +112,18 @@ function check_if_banned($db){
$check_ar = $check_db->fetchArray(SQLITE3_NUM);
$log_at = $check_ar[1];
- $_SESSION["login_attempts"] = $log_at;
+ if($log_at){
+ $_SESSION["login_attempts"] = $log_at;
+ }
$accepted_time = $_SERVER["REQUEST_TIME"] - 21600; // == 6h
$db->exec("DELETE FROM banned_user WHERE time<'".$accepted_time."'");
- if($log_at == 0 && ($check_ar[0] < $accepted_time)){
- return false; // not longer banned
- } else {
- return true; // still banned
+ if($log_at <= 0){
+ if($check_ar[0] >= $accepted_time){
+ return true; // still banned
+ }
}
+
+ return false; // not longer banned
}
diff --git a/www/functions/func_user.php b/www/functions/func_user.php
index d9e202d..8efd104 100755
--- a/www/functions/func_user.php
+++ b/www/functions/func_user.php
@@ -290,7 +290,11 @@ function user_id($db, $user){
}
$owner = $owner_ar[0];
- return $owner;
+ if($owner != ""){
+ return $owner;
+ } else {
+ return false;
+ }
}
function change_username($db, $oldname, $newname){
diff --git a/www/index.php b/www/index.php
index a8dc53f..b6dce19 100755
--- a/www/index.php
+++ b/www/index.php
@@ -5,12 +5,12 @@ if(!isset($_SESSION["login"])){
$_SESSION["login"] = false;
}
-require_once("include.php"); // handles all the stuff that needs to be included
-
if(!isset($_SESSION["login_attempts"])){
$_SESSION["login_attempts"] = 6;
}
+require_once("include.php"); // handles all the stuff that needs to be included
+
if(check_if_banned($db)){
echo "You are banned. ;_;";
exit;
@@ -101,7 +101,7 @@ if(empty($_GET)){
echo "Database error. Please send me a
mail";
exit;
} else {
- header("Refresh: 0; ".$scheme.$_SERVER["HTTP_HOST"]."/liste");
+ print_list($db);
}
} else {
print_insert();
@@ -112,13 +112,14 @@ if(empty($_GET)){
if($_SERVER["REQUEST_METHOD"] == "POST"){
$var = update_db($db);
if($var){
- header("Refresh: 0; ".$scheme.$_SERVER["HTTP_HOST"]."/liste");
+ print_list($db);
} else {
+ echo $var."
";
echo "Database error. Please send me a
mail";
exit;
}
} else {
- header("Refresh: 0; ".$scheme.$_SERVER["HTTP_HOST"]."/liste");
+ print_list($db);
}
break;
diff --git a/www/insert.php b/www/insert.php
index c0b30e5..4a17042 100644
--- a/www/insert.php
+++ b/www/insert.php
@@ -35,7 +35,7 @@ echo "