
December 30th, 2012, 06:49 PM
|
|
Registered User
|
|
Join Date: Dec 2012
Posts: 1
Time spent in forums: 35 m 26 sec
Reputation Power: 0
|
|
|
PHP-General - Cant login on website
Hello, i have website 9gag clone
Problem is i cant login to website as member, and cant login in admin panel...
but register work fine , even Facebook reg. work
btw. login must redirect to setting.php
here is code of login.php
help !
PHP Code:
<?php
include("include/config.php");
include("include/functions/import.php");
$redirect = stripslashes($_REQUEST['redirect']);
$r = base64_decode($redirect);
STemplate::assign('r',$r);
if ($_SESSION['USERID'] != "" && $redirect != "")
{
header("Location:$redirect");exit;
}
if($_REQUEST['logsub']!="")
{
$username = htmlentities(strip_tags($_REQUEST['username']), ENT_COMPAT, "UTF-8");
$password = htmlentities(strip_tags($_REQUEST['password']), ENT_COMPAT, "UTF-8");
if($username=="")
{
$error=$lang['4'];
}
elseif($password=="")
{
$error=$lang['5'];
}
else
{
if(!verify_valid_email($username))
{
$encryptedpassword = md5($password);
$query="SELECT status,USERID,email,username,verified,filter,mylang from members WHERE username='".mysql_real_escape_string($username)."' and password='".mysql_real_escape_string($encryptedpassword)."'";
$result=$conn->execute($query);
if($result->recordcount()<1)
{
$error=$lang['26'];
}
elseif($result->fields['status']=="0")
{
$error = $lang['30'];
}
if($error=="")
{
$query="update members set lastlogin='".time()."', lip='".$_SERVER['REMOTE_ADDR']."' WHERE username='".mysql_real_escape_string($username)."'";
$conn->execute($query);
$_SESSION['USERID']=$result->fields['USERID'];
$_SESSION['EMAIL']=$result->fields['email'];
$_SESSION['USERNAME']=$result->fields['username'];
$_SESSION['VERIFIED']=$result->fields['verified'];
$_SESSION['FILTER']=$result->fields['filter'];
$setlang = $result->fields['mylang'];
if($setlang != "")
{
$addlang = "?language=".$setlang;
}
if($_REQUEST["remember"]=="yes")
{
create_slrememberme();
}
if($redirect == "")
{
header("Location:$config[baseurl]/settings".$addlang);exit;
}
else
{
header("Location:$redirect");exit;
}
}
}
else
{
$encryptedpassword = md5($password);
$query="SELECT status,USERID,email,username,verified,filter,mylang from members WHERE email='".mysql_real_escape_string($username)."' and password='".mysql_real_escape_string($encryptedpassword)."'";
$result=$conn->execute($query);
if($result->recordcount()<1)
{
$error=$lang['37'];
}
elseif($result->fields['status']=="0")
{
$error = $lang['30'];
}
if($error=="")
{
$query="update members set lastlogin='".time()."', lip='".$_SERVER['REMOTE_ADDR']."' WHERE username='".mysql_real_escape_string($username)."'";
$conn->execute($query);
$_SESSION['USERID']=$result->fields['USERID'];
$_SESSION['EMAIL']=$result->fields['email'];
$_SESSION['USERNAME']=$result->fields['username'];
$_SESSION['VERIFIED']=$result->fields['verified'];
$_SESSION['FILTER']=$result->fields['filter'];
$setlang = $result->fields['mylang'];
if($setlang != "")
{
$addlang = "?language=".$setlang;
}
if($_REQUEST["remember"]=="yes")
{
create_slrememberme();
}
if($redirect == "")
{
header("Location:$config[baseurl]/settings".$addlang);exit;
}
else
{
header("Location:$redirect");exit;
session_start();
}
}
}
}
}
$pagetitle = $lang['11'];
STemplate::assign('pagetitle',$pagetitle);
STemplate::assign('error',$error);
//TEMPLATES BEGIN
STemplate::display('login.tpl');
//TEMPLATES END
?>
|