|

<?php
// ClanSphere 2006 - www.clansphere.net
// $Id: account.php 361 2006-09-24 20:43:44Z hajo $

$login = array('mode' => FALSE, 'error' => '', 'cookie' => 0);
$account = array('access_id' => 1, 'users_id' => 0, 'users_lang' => $cs_main['def_lang'], 'users_limit' => 20, 'users_timezone' => $cs_main['def_timezone'], 'users_dstime' => $cs_main['def_dstime']);

session_start();

if(empty($_SESSION['users_id'])) {

if(isset($_POST['login'])) {
$login['method'] = 'form';
$login['nick'] = $_POST['nick'];
$login['password'] = $_POST['password'];
if($cs_db['hash']=='md5') {
$login['securepw'] = md5($login['password']);
}
if($cs_db['hash']=='sha1') {
$login['securepw'] = sha1($login['password']);
}
if(isset($_POST['cookie'])) {
$login['cookie'] = $_POST['cookie'];
}
$login_where = "users_nick = '" . cs_sql_escape($login['nick']) . "'";
}
elseif(isset($_COOKIE['clansphere_userid']) AND isset($_COOKIE['clansphere_securepw'])) {
$login['method'] = 'cookie';
$login['userid'] = $_COOKIE['clansphere_userid'];
$login['securepw'] = $_COOKIE['clansphere_securepw'];
settype($login['userid'],'integer');
$login_where = "users_id='" . $login['userid'] . "'";
}

if(isset($login['method'])) {
$login_db = cs_sql_select(__FILE__,'users','users_id, users_pwd, users_active',$login_where);
if(!empty($login_db['users_pwd']) AND $login_db['users_pwd'] == $login['securepw']) {
if(empty($login_db['users_active'])) {
$login['error'] = 'closed';
}
else {
$login['mode'] = TRUE;
$_SESSION['users_id'] = $login_db['users_id'];
$_SESSION['users_ip'] = $_SERVER['REMOTE_ADDR'];
$_SESSION['users_agent'] = $_SERVER['HTTP_USER_AGENT'];
}
}
elseif(!empty($login_db['users_id'])) {
$login['error'] = 'wrong_pwd';
}
else {
$login['error'] = 'user_notfound';
}

if(!empty($login['cookie']) AND !empty($login['mode'])) {
$login['method'] = 'form_cookie';
setcookie('clansphere_userid',$login_db['users_id'], cs_time() + 2592000);
setcookie('clansphere_securepw',$login['securepw'], cs_time() + 2592000);
}
}
}

if(!empty($_SESSION['users_id'])) {
$login['method'] = isset($login['method']) ? $login['method'] : 'session';
$login['mode'] = TRUE;
$acc_sc = 'users_id, users_nick, users_lang, access_id, users_limit, users_view, users_timezone, users_dstime';
$account = cs_sql_select(__FILE__,'users',$acc_sc,"users_id = '" . $_SESSION['users_id'] . "'");
}

if(!empty($account['users_id'])) {
if($_SESSION['users_ip'] != $_SERVER['REMOTE_ADDR'] OR $_SESSION['users_agent'] != $_SERVER['HTTP_USER_AGENT']) {
session_destroy();
$login['mode'] = FALSE;
}
elseif($cs_main['mod']=='users' AND $cs_main['action']=='logout') {
setcookie('clansphere_userid',0,1);
setcookie('clansphere_securepw',0,1);
session_destroy();
$login['mode'] = FALSE;
}
else {
$cells = array('users_laston');
$content = array(cs_time());
cs_sql_update(__FILE__,'users',$cells,$content,$account['users_id ']);
}
}

if(!empty($_GET['lang']) OR empty($account['users_id']) AND !empty($_COOKIE['clansphere_lang'])) {
require_once('system/core/lang.php');
}
require_once('lang/' . $account['users_lang'] . '/system/comlang.php');

$gma = cs_sql_select(__FILE__,'access','*',"access_id = '" . $account['access_id'] . "'");
if(is_array($gma)) {
$account = array_merge($account,$gma);
}

?>

|

|

|

|