From 65dc06eab2305800ad862b4621807fd7d4f7fe8d Mon Sep 17 00:00:00 2001 From: Horus3 Date: Sun, 9 Feb 2014 17:21:59 +0100 Subject: Init --- check.php | 108 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 108 insertions(+) create mode 100644 check.php (limited to 'check.php') diff --git a/check.php b/check.php new file mode 100644 index 0000000..b3911de --- /dev/null +++ b/check.php @@ -0,0 +1,108 @@ +query("SELECT salt FROM user WHERE name='$username';"); + while($salt_array = $salt_db->fetchArray(SQLITE3_NUM)){ + foreach($salt_array as $firstelement){ + $salt=$firstelement; + } + } + + $password = "$salt"."$passwort"; + $hash_password = md5($password); + for($i=0;$i<15000;$i++) + $hash_password = md5($hash_password); + + $real_password_db = $db_check->query("SELECT password FROM user WHERE name='$username';"); + while($real_password_array = $real_password_db->fetchArray(SQLITE3_NUM)){ + foreach($real_password_array as $secondelement){ + $real_password=$secondelement; + } + } + +/*___Einloggen___*/ +if ($real_password == $hash_password) { + + $_SESSION["login"] = true; + $_SESSION["username"] = "$username"; + +/*___Datenbankabfrage: Spruch___*/ + $zufall = mt_rand(1,52); + + $db = new SQLite3("/var/www/jungegemeinde/database/jg.db"); + + + $zufall = SQLite3::escapeString("$zufall"); + $ergebnis = $db->query("SELECT * FROM sprueche where id=$zufall;"); + + while($row=$ergebnis->fetchArray()){ + $spruch = $row["spruch"]; + } + + +echo" + + + + +
+