From 1a7fa60f6cb2ee26843ca19e37bb4ff44104ad55 Mon Sep 17 00:00:00 2001 From: Bulletin Date: Thu, 29 Dec 2016 16:42:32 -0500 Subject: Added existing progress --- login.php | 82 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 82 insertions(+) create mode 100644 login.php (limited to 'login.php') diff --git a/login.php b/login.php new file mode 100644 index 0000000..8c723a2 --- /dev/null +++ b/login.php @@ -0,0 +1,82 @@ + 0) loggedin(); +if (!empty($_POST["email"]) && !empty($_POST["password"])) { + $db = new bdb() or fatal($db->error); + $result = $db->query("SELECT id FROM users WHERE email = '".$db->escape_string($_POST["email"])."' AND password = '".hash("sha512", $_POST["password"])."' AND active = 1 LIMIT 1") or fatal($db->error); + if ($result->num_rows < 1) l_redirect('login.php?err=1'); + $row = $result->fetch_assoc(); + $result->free(); + $token = uniqid("bu".$row["id"], true); + $db->query("UPDATE users SET session = '".hash("sha512", $token)."' WHERE id = ".intval($row["id"])) or fatal($db->error); + if ($db->affected_rows < 1) fatal("Could not sync with database."); + $db->close(); + setcookie($b_config['c_name'], intval($row["id"]).';'.$token, empty($_POST['remember']) ? 0 : (time()+$b_config['c_expire']), $b_config['c_path'], $b_config['c_dom'], $b_config['c_sec'], $b_config['c_http']); + loggedin(); +} else { + $e = $_GET['err']; + $e_flag = 0; + $f_uname = 1 << 0; + $f_pw = 1 << 1; + $e_msg = 'An unknown error has occurred.'; + if ($e == 1) { + $e_flag = $f_uname | $f_pw; + $e_msg = 'That email address and password combination is not in our records.'; + } +?> + + + + + Log In / Bulletin + + + + + +
+
+'; + else + echo '
'; +?> + +
+>1) & 1) + echo '
'; + else + echo '
'; +?> + +
+
+
+ + +
+
+ +
+
+ + 0) + echo '

'.htmlentities($e_msg).'

'; +?> +

Forgot your password?

+

Don't have an account? Sign Up

+
+
+

Welcome back to Bulletin! :)

+

Copyright © 2016 Bulletin Team

+ + + -- cgit v1.2.3